PT-2026-6027 · Unknown · Drupal At Internet Smarttag

Frank Mably + 3 · Publicado 2026-01-14 · Atualizado 2026-02-04 · CVE-2026-0946

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Drupal AT Internet SmartTag versions prior to 1.0.1

Description The software contains a flaw due to improper neutralization of input during web page generation, which allows for Cross-Site Scripting (XSS). This means an attacker could potentially inject malicious scripts into web pages viewed by other users.

Recommendations Update to version 1.0.1 or later.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2026-0946

DRUPAL-CONTRIB-2026-003

Produtos afetados

Drupal At Internet Smarttag

Referências · 6

• https://drupal.org/sa-contrib-2026-003 · Aviso do Fabricante
• https://osv.dev/vulnerability/DRUPAL-CONTRIB-2026-003 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2026-0946 · Nota de Segurança
• https://twitter.com/CVEnew/status/2019182774130000177 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2026-0946 · Aviso do Fabricante
• https://t.me/CVEtracker/43760 · Publicação no Telegram