EUVD-2026-43058
GHSA-q48q-x876-9gr8
Severity by source
AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Network-accessible with no auth required; victim interaction mandatory; scope changes to browser; confidentiality and integrity limited to session/page context, no availability impact.
Primary rating from Vendor (drupal).
CVSS VectorVendor: drupal
Lifecycle Timeline
4DescriptionCVE.org
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI (Artificial Intelligence) allows Cross-Site Scripting (XSS). This issue affects AI (Artificial Intelligence) versions: from 0.0.0 to 1.2.17, from 1.3.0 to 1.3.8, from 1.4.0 to 1.4.3.
AnalysisAI
Cross-site scripting in the Drupal AI (Artificial Intelligence) contributed module exposes sites to session hijacking and malicious content injection when users interact with unsanitized AI-generated or AI-related output rendered in the browser. The module fails to properly neutralize user-controlled or AI-sourced input before including it in generated web pages, allowing an unauthenticated remote attacker to craft a payload that executes in a victim's browser upon interaction. No active exploitation is confirmed (not in CISA KEV) and EPSS is very low at 0.16% (6th percentile), though the network-accessible, no-privilege attack surface warrants prompt patching on internet-facing Drupal deployments.
Technical ContextAI
The affected component is the Drupal AI (Artificial Intelligence) contributed module, identified by CPE cpe:2.3:a:drupal:ai_(artificial_intelligence):*:*:*:*:*:*:*:*. This module integrates large language model or AI provider functionality into Drupal CMS, rendering AI-generated or AI-augmented content in web page contexts. The root cause is CWE-79 (Improper Neutralization of Input During Web Page Generation), meaning the module does not apply adequate output encoding or contextual escaping before embedding dynamic content into HTML. The CVSS scope change (S:C) signals that the exploit crosses from the server context into the victim's browser context - the hallmark of reflected or stored XSS - allowing attacker-controlled JavaScript to execute in the victim's browser session. Three distinct version branches are affected: 0.x through pre-1.2.17, 1.3.x through pre-1.3.8, and 1.4.x through pre-1.4.3.
RemediationAI
Upgrade the Drupal AI module to a patched release per the active branch in use: 1.2.17 or later for the 1.2.x branch, 1.3.8 or later for the 1.3.x branch, or 1.4.3 or later for the 1.4.x branch. The Drupal security advisory at https://www.drupal.org/sa-contrib-2026-054 should be consulted for the canonical upgrade path and any branch-specific guidance. If immediate upgrade is not feasible, a temporary workaround is to disable or restrict access to the AI module features that render user-influenced or AI-generated content in unauthenticated page contexts - this reduces the exploitable surface but may impair AI functionality. Content Security Policy (CSP) headers configured to block inline scripts can meaningfully reduce the impact of any residual XSS by preventing injected scripts from executing, though this does not address the underlying input sanitization defect. Disabling the module entirely is the most conservative compensating control if the risk window must be maintained for an extended period.
More in Ai Artificial Intelligence
View allDrupal AI module versions 0.0.0 before 1.1.11 and 1.2.0 before 1.2.12 contain an incorrect authorization vulnerability (
Forceful browsing exposure in Drupal's AI (Artificial Intelligence) contributed module permits high-privileged authentic
Same weakness CWE-79 – Cross-site Scripting (XSS)
View allShare
External POC / Exploit Code
Leaving vuln.today