CVE-2026-0946

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AT Internet SmartTag allows Cross-Site Scripting (XSS).This issue affects AT Internet SmartTag: from 0.0.0 before 1.0.1.

Credits

Pierre Rudloff (prudloff)
Frank Mably (mably)
Greg Knaddison (greggles)
Juraj Nemec (poker10)

References