Vulnerability Bulletins |
CVE-2026-16638 |
|
| Affected software | DRUPAL |
| Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Media Folders allows Stored XSS. This issue affects Media Folders versions: from 0.0.0 to 1.0.8. | |
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2026-16638 | |