CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2026-15081

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal Location Selector allows SQL Injection. This issue affects Location Selector versions: from 0.0.0 to 1.3.0.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 27.1%

CVSS Severity

CVSS v3 Score 7.4

References

https://www.drupal.org/sa-contrib-2026-072

Products affected by CVE-2026-15081

Handkerchief » Location Selector » Version: 1.0

cpe:2.3:a:handkerchief:location_selector:1.0
Handkerchief » Location Selector » Version: 1.1

cpe:2.3:a:handkerchief:location_selector:1.1
Handkerchief » Location Selector » Version: 1.2

cpe:2.3:a:handkerchief:location_selector:1.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-15081

Products

Pricing

Contact Us