PT-2026-137290

CVE-2026-118566

Published

2026-11-04

Updated

2026-11-04

Score

N/A

Not available

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.

The Content Synchronizer module allows content to be exported and imported between Drupal sites via uploaded archive files.

The module doesn't sufficiently sanitize input passed to its client-side code, leading to a DOM-based cross-site scripting (XSS) vulnerability.

Vendors

Affected products

Related identifiers

DRUPAL-CONTRIB-2026-294

Found an issue in the description? Have something to add? Feel free to write us 👾