Cross-Site Scripting Vulnerability in Drupal UI Icons

CVE-2026-114532

What is CVE-2026-114532?

The Drupal UI Icons component is susceptible to a Cross-Site Scripting (XSS) vulnerability due to improper neutralization of user input during web page generation. Attackers may exploit this flaw to inject malicious scripts, potentially compromising the security of affected applications and users. This vulnerability impacts UI Icons versions ranging from 0.0.0 to 1.1.3 and from 2.0.0 to 2.0.2, necessitating immediate attention to ensure proper input sanitization and application integrity.

References