En resumen
- CVE-2026-118553 es una vulnerabilidad MEDIO (CVSS 5.5) que afecta a drupal/ai.
- Probabilidad de explotación en los próximos 30 días (EPSS): 0.14%, mayor que el 3.8% de las vulnerabilidades.
- Solución: actualizar a 1.5.2, 1.4.11 o posterior.
| Package | Affected versions | Patched versions |
|---|
| drupal/ai Packagist:https://packages.drupal.org/8 | ≥ 1.5.0, < 1.5.2< 1.4.11
| 1.5.21.4.11
|
Description
The AI module includes a submodule, AI Automator. This submodule allows you to automatically fill out fields using AI, based on other fields.
The module doesn't sufficiently check access to text formats, allowing users to author field data in text formats they should not have access to.
NVD description
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI (Artificial Intelligence) allows Stored XSS. This issue affects AI (Artificial Intelligence) versions: from 0.0.0 to 1.4.11, from 1.5.0 to 1.5.2.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free