CVE-2026-13231

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Advanced Content Feedback (aka admin_feedback) allows Stored XSS. This issue affects Advanced Content Feedback (aka admin_feedback) versions: from 0.0.0 to 2.8.0.

Credits

Bill Seremetis (bserem)
Bill Seremetis (bserem)
Greg Knaddison (greggles)
Juraj Nemec (poker10)

References