CVE-2026-13242

The vulnerability in the Geolocation Field module for Drupal allows for SQL Injection due to improper neutralization of special elements in SQL commands, affecting versions from 0.0.0 to 3.15.0. Successful exploitation could enable attackers to manipulate database queries, potentially leading to unauthorized data access or modification. Organizations using affected versions of the Geolocation Field should prioritize patching to mitigate the risk of exploitation.