Vulnerability DRUPAL-CONTRIB-2026-304
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
4 hours ago
November 04, 2026 at 05:34 PM UTC
No summary available
<1.6.0
<1.6.0
Details
The Name Field module provides a field for storing a personal name as separate components.
The module does not sufficiently sanitize values under some circumstances. A name stored on the field can be interpreted as HTML, which can lead to a cross-site scripting (XSS) vulnerability.
References
Impacted packages
Timeline
Published
4 hours ago
November 04, 2026 at 05:34 PM UTC
Last Modified
1 hour ago
November 04, 2026 at 08:30 PM UTC