Anti Spam By Cleantalk EUVD-2026-15471

While a CVSS score is not available in the provided intelligence, the CWE-79 classification combined with the XSS designation indicates this is a serious vulnerability with typical CVSS characteristics of high severity (likely CVSS 6.1 to 8.8 depending on complexity and privileges required). The vulnerability affects a widely-deployed Drupal security module, meaning the attack surface is significant across Drupal installations. The availability of an official patch (version 9.7.0) from the Drupal security team is a positive signal for remediation. Without active KEV status or confirmed public POC information in the provided data, this appears to be a responsibly disclosed vulnerability with vendor coordination. The real-world risk is elevated for unpatched Drupal instances using Anti-Spam by CleanTalk, particularly those allowing untrusted user input or where administrative interfaces are exposed.

An attacker crafts a malicious comment, form submission, or user-generated content payload containing JavaScript code and submits it through a Drupal form protected by the Anti-Spam by CleanTalk module. Due to the XSS vulnerability, the module fails to properly escape the payload, and the injected script executes when an administrator or other user views the content in the Drupal backend or frontend. The attacker's script can then steal the victim's session cookie, inject additional malicious content, or redirect the user to a phishing page.