Vulnerability Details CVE-2026-2348
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Quick Edit allows Cross-Site Scripting (XSS).This issue affects Quick Edit: from 0.0.0 before 1.0.5, from 2.0.0 before 2.0.1.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 8.4%
CVSS Severity
CVSS v3 Score 5.4
References
Products affected by CVE-2026-2348
-
cpe:2.3:a:wim-leers:quick_edit:*
-
cpe:2.3:a:wim-leers:quick_edit:2.0.0