Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2026-6367

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Drupal core allows Cross-Site Scripting (XSS). This issue affects Drupal core: from 11.3.0 before 11.3.7.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 10.0%
CVSS Severity
CVSS v3 Score 6.1
Products affected by CVE-2026-6367
  • Drupal » Drupal » Version: 11.3.0
    cpe:2.3:a:drupal:drupal:11.3.0
  • Drupal » Drupal » Version: 11.3.1
    cpe:2.3:a:drupal:drupal:11.3.1
  • Drupal » Drupal » Version: 11.3.2
    cpe:2.3:a:drupal:drupal:11.3.2
  • Drupal » Drupal » Version: 11.3.3
    cpe:2.3:a:drupal:drupal:11.3.3
  • Drupal » Drupal » Version: 11.3.4
    cpe:2.3:a:drupal:drupal:11.3.4
  • Drupal » Drupal » Version: 11.3.5
    cpe:2.3:a:drupal:drupal:11.3.5
  • Drupal » Drupal » Version: 11.3.6
    cpe:2.3:a:drupal:drupal:11.3.6


Products
Pricing
Contact Us

Shodan ® - All rights reserved