Cross-Site Scripting Vulnerability in Drupal Bootstrap
CVE-2026-114538

Currently unrated

Key Information:

Vendor

Drupal

Status
Vendor
CVE Published:
30 October 2026

What is CVE-2026-114538?

The Drupal Bootstrap product has a vulnerability that enables improper neutralization of input during web page generation, leading to potential Cross-Site Scripting (XSS) attacks. Specifically, this flaw can be exploited by an attacker to inject malicious scripts into web pages viewed by users. Affected versions range from 0.0.0 to 3.45.0, necessitating immediate updates and patches to safeguard web applications from potential exploitation.

Affected Version(s)

Bootstrap 0.0.0 < 3.45.0

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Ra Mänd (ram4nd)
Joseph Olstad (joseph.olstad)
Ra Mänd (ram4nd)
Swan Kalata (akalata)
Greg Knaddison (greggles)
Ra Mänd (ram4nd)
.