https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 12:38:16 +0000 https://vulnerability.circl.lu/vuln/drupal-contrib-2026-082 <p><strong>Affected:</strong> Packagist:https://packages.drupal.org/8: drupal/search_api_autocomplete</p> <p>This module enables you to add autocomplete suggestions for search forms created with the [Search API module](/project/search_api).</p> <p>The module ships with a test script that is accessible to anonymous users and doesn&#39;t sufficiently validate user input, leading to a Cross Site Scripting vulnerability.</p> <p>This vulnerability is mitigated by the fact that the web server must be configured to display warning messages to users.</p> <p><strong>Affected:</strong> Packagist:https://packages.drupal.org/8: drupal/search_api_autocomplete</p> <p>This module enables you to add autocomplete suggestions for search forms created with the [Search API module](/project/search_api).</p> <p>The module ships with a test script that is accessible to anonymous users and doesn&#39;t sufficiently validate user input, leading to a Cross Site Scripting vulnerability.</p> <p>This vulnerability is mitigated by the fact that the web server must be configured to display warning messages to users.</p> https://vulnerability.circl.lu/vuln/drupal-contrib-2026-082 https://vulnerability.circl.lu/vuln/fkie_cve-2026-16640 <p>Improper Neutralization of Input During Web Page Generation (&#34;Cross-site Scripting&#34;) vulnerability in Drupal Search API Autocomplete allows Reflected XSS. This issue affects Search API Autocomplete versions: from 0.0.0 to 1.12.0.</p> <p>Improper Neutralization of Input During Web Page Generation (&#34;Cross-site Scripting&#34;) vulnerability in Drupal Search API Autocomplete allows Reflected XSS. This issue affects Search API Autocomplete versions: from 0.0.0 to 1.12.0.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-16640 https://vulnerability.circl.lu/vuln/ghsa-jjcr-jhm4-rpqw <p>Improper Neutralization of Input During Web Page Generation (&#34;Cross-site Scripting&#34;) vulnerability in Drupal Search API Autocomplete allows Reflected XSS. This issue affects Search API Autocomplete versions: from 0.0.0 to 1.12.0.</p> <p>Improper Neutralization of Input During Web Page Generation (&#34;Cross-site Scripting&#34;) vulnerability in Drupal Search API Autocomplete allows Reflected XSS. This issue affects Search API Autocomplete versions: from 0.0.0 to 1.12.0.</p> https://vulnerability.circl.lu/vuln/ghsa-jjcr-jhm4-rpqw