← CVE index
Vulnerability record/PUBLISHED/Published Oct 30, 2026 03:10:20 UTC

CVE-2026-107252

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal MathJax: LaTeX for Drupal allows Cross-Site Scripting (XSS). This issue affects MathJax: LaTeX for Drupal versions: from 0.0.0 to 4.1.2.

Base scoreN/A/ 10
SeverityNoneCVSS unscored

Exploitability / impact

CVSS metric breakdown

Vector-derived attributes
Base severityNone
No CVSS vector is available for this record.

CVSS communicates standardized severity and impact characteristics. It does not establish whether a system is exploitable in your specific environment.

Record context

CVE Numbering Authoritydrupal
Last updatedOct 30, 2026 03:10:20 UTC
PublishedOct 30, 2026 03:10:20 UTC
ReservedOct 7, 2026 15:25:19 UTC

Credits

  • cilefen (cilefen)
  • bchin
  • cilefen (cilefen)
  • Swan Kalata (akalata)
  • Greg Knaddison (greggles)
  • Juraj Nemec (poker10)