PT-2026-84899

CVE-2026-84924

Published

2026-09-02

Updated

2026-10-22

Description by

CVSS 3.1

5.4

Medium

MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Drupal Email Verification / SMS Verification / OTP Verification versions 0.0.0 through 2.4.0

Description An unauthenticated reflected Cross-site Scripting (XSS) issue exists because the module does not sufficiently filter user-supplied input before outputting it during web page generation.

Recommendations Update Drupal Email Verification / SMS Verification / OTP Verification to a version later than 2.4.0.

Exploitability

Fix

Impacts

Researchers

Vendors