CVE-2026-126734

This module enables you to provide a way to embed parapraphs in any rich-text field using the WYSIWYG editor.

The module doesn't sufficiently filter for malicious text in the autocomplete search filter, leading to a cross-site scripting vulnerability.

This vulnerability is mitigated by the fact that an attacker must have permission to edit the label of the paragraph entity.