CVE-2026-87942

Name of the Vulnerable Software and Affected Versions Drupal SafeDelete versions 0.0.0 through 1.0.88

Description Stored cross-site scripting (XSS) occurs because the module does not sufficiently sanitize node titles when displaying the orphaned nodes report. This allows an attacker with permissions to create content of a type configured for the orphaned nodes report to inject malicious scripts. Cross-site scripting is a flaw where malicious scripts are injected into trusted websites.

Recommendations Update Drupal SafeDelete to a version later than 1.0.88.