SEPTEMBER 19, 2026
Live Feed
Back to database
Case File

CVE-2026-15082

MEDIUM · CVSS 5.4 EPSS 0.17%

Source: NVD + CISA KEV + EPSS · Published 2026-07-10 · Last synced 2026-08-09

CyberRota Analysis

AI-Generated

The vulnerability in Siteimprove Analytics allows for Cross-Site Scripting (XSS) due to improper input neutralization during web page generation, potentially enabling attackers to inject malicious scripts. This affects all versions from 0.0.0 to 2.0.1, posing a risk to users who have implemented this analytics tool on their Drupal sites. Organizations utilizing affected versions should prioritize remediation to safeguard against potential exploitation and data compromise.

CVE
CVE-2026-15082
Severity
MEDIUM
CVSS
5.4
EPSS
0.17%

Original NVD Description

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Siteimprove Analytics allows Cross-Site Scripting (XSS). This issue affects Siteimprove Analytics versions: from 0.0.0 to 2.0.1.