CVE-2026-96359 | Drupal Webform up to 6.2.11/6.3.0 cross site scripting

October 22, 2026 Yanac

A vulnerability classified as problematic has been found in Drupal Webform up to 6.2.11/6.3.0. This impacts an unknown function. This manipulation causes cross site scripting.

This vulnerability is tracked as CVE-2026-96359. The attack is possible to be carried out remotely. No exploit exists.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More