SEPTEMBER 19, 2026
Live Feed
Back to database
Case File

CVE-2026-15084

MEDIUM · CVSS 5.4 EPSS 0.17%

Source: NVD + CISA KEV + EPSS · Published 2026-07-10 · Last synced 2026-08-09

CyberRota Analysis

AI-Generated

A stored cross-site scripting (XSS) vulnerability exists in the UI Patterns (SDC in Drupal UI) component, affecting versions 2.0.0 to 2.0.17. This flaw allows attackers to inject malicious scripts into web pages, potentially compromising user data and session integrity. Organizations using these specific versions of Drupal should prioritize remediation to safeguard against potential exploitation.

CVE
CVE-2026-15084
Severity
MEDIUM
CVSS
5.4
EPSS
0.17%

Original NVD Description

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal UI Patterns (SDC in Drupal UI) allows Stored XSS. This issue affects UI Patterns (SDC in Drupal UI) versions: from 2.0.0 to 2.0.17.