Kurz gesagt
- CVE-2026-118553 ist eine Schwachstelle (MITTEL (CVSS 5.5)) in drupal/ai.
- Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 0.14%, höher als bei 3.8% aller Schwachstellen.
- Abhilfe: auf 1.5.2, 1.4.11 oder neuer aktualisieren.
| Package | Affected versions | Patched versions |
|---|
| drupal/ai Packagist:https://packages.drupal.org/8 | ≥ 1.5.0, < 1.5.2< 1.4.11
| 1.5.21.4.11
|
Description
The AI module includes a submodule, AI Automator. This submodule allows you to automatically fill out fields using AI, based on other fields.
The module doesn't sufficiently check access to text formats, allowing users to author field data in text formats they should not have access to.
NVD description
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI (Artificial Intelligence) allows Stored XSS. This issue affects AI (Artificial Intelligence) versions: from 0.0.0 to 1.4.11, from 1.5.0 to 1.5.2.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free