PT-2026-22085 · Drupal+2 · Cleantalk Antispam+2

Damien Mckenna + 6 · Publicado 2026-02-25 · Atualizado 2026-03-30 · CVE-2026-3213

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Média

Vetor base

AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Drupal Anti-Spam by CleanTalk versions prior to 9.7.0

Description The software contains a flaw related to improper handling of user-supplied data during web page creation, which could allow for Cross-Site Scripting (XSS) attacks. The issue exists because the software does not adequately sanitize user input. The vulnerability is limited in scope as it only affects users who are challenged or blocked by the firewall.

Recommendations Update to version 9.7.0 or later.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2026-3213

DRUPAL-CONTRIB-2026-014

Produtos afetados

Cleantalk Antispam

Anti-Spam

Drupal/Cleantalk

Referências · 5

• https://drupal.org/sa-contrib-2026-014 · Aviso do Fabricante
• https://osv.dev/vulnerability/DRUPAL-CONTRIB-2026-014 · Aviso do Fabricante
• https://twitter.com/infoflowcloud/status/2038620212988146115 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2026-3213 · Nota de Segurança
• https://twitter.com/CVEnew/status/2038618164787892289 · Publicação no Twitter