CVE-2026-118576 | Drupal Stage File Proxy up to 3.1.6/4.0.0 cross site scripting

October 30, 2026 Yanac

A vulnerability classified as problematic was found in Drupal Stage File Proxy up to 3.1.6/4.0.0. This impacts an unknown function. Executing a manipulation can lead to cross site scripting.

This vulnerability is tracked as CVE-2026-118576. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is advised.VulDB Recent EntriesRead More