Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal Location Selector allows SQL Injection. This issue affects Location Selector versions: from 0.0.0 to 1.3.0.CreditsDrew Webber (mcdruid)handkerchiefGreg Knaddison (greggles)Drew Webber (mcdruid)Juraj Nemec (poker10)Referenceshttps://www.drupal.org/sa-contrib-2026-072
