{"id":"CVE-2026-118553","kind":"vulnerability","aliases":["CVE-2026-118553"],"related":[],"title":"Drupal AI module: stored cross-site scripting in web page generation","description":"Improper Neutralization of Input During Web Page Generation (\"Cross-site Scripting\") vulnerability in Drupal AI (Artificial Intelligence) allows Stored XSS. This issue affects AI (Artificial Intelligence) versions: from 0.0.0 to 1.4.11, from 1.5.0 to 1.5.2.","summary":"The Drupal AI (Artificial Intelligence) module fails to neutralize input when generating web pages, allowing stored cross-site scripting. An attacker who can save content on the site can run scripts in other users' browsers.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["ai-module","ai-tooling","drupal","web-cms"],"not_affected_if":["module-not-installed","version-outside-range"],"how_to_check":"- Check the installed AI module version with `drush pm:list --filter=ai` or on the module's info page in Drupal admin.\n- Confirm whether the installed version is between `0.0.0` and `1.4.11`, or between `1.5.0` and `1.5.2`.","fix":"- Drupal AI module: move to a version after `1.5.2` or after `1.4.11` on its release branch; the sources do not name the exact fixed release.","status":"open","published_at":"2026-10-30T04:18:20+00:00","first_seen_at":"2026-10-30T04:28:38+00:00","triaged_at":"2026-10-30T04:29:25+00:00","updated_at":"2026-10-30T04:29:25+00:00","category":"ai-tooling","confidence":0.5,"triage":{"at":"2026-10-30T04:29:25Z","model":"claude-haiku-5-5","output":{"fix":"- Drupal AI module: move to a version after `1.5.2` or after `1.4.11` on its release branch; the sources do not name the exact fixed release.","reach":"internet","title":"Drupal AI module: stored cross-site scripting in web page generation","impact":"medium","summary":"The Drupal AI (Artificial Intelligence) module fails to neutralize input when generating web pages, allowing stored cross-site scripting. An attacker who can save content on the site can run scripts in other users' browsers.","audience":"businesses","category":"ai-tooling","nicknames":[],"who_cares":["drupal","ai-module","web-cms"],"confidence":0.5,"fix_status":"unknown","needs_auth":"unknown","worst_case":"Scripts run in other users' browsers, stealing sessions or actions","analyst_note":"Find the Drupal security advisory for the AI module to confirm the fixed release and the exact stored-input path; the NVD entry gives only the affected ranges.","how_to_check":"- Check the installed AI module version with `drush pm:list --filter=ai` or on the module's info page in Drupal admin.\n- Confirm whether the installed version is between `0.0.0` and `1.4.11`, or between `1.5.0` and `1.5.2`.","plain_action":"","needs_analyst":true,"not_affected_if":["module-not-installed","version-outside-range"],"who_is_affected":"Drupal sites that run the AI (Artificial Intelligence) module in the affected version ranges are exposed. The source does not say which AI features or roles are needed to store the malicious input, so sites with the module installed should be treated as exposed until checked.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000717,"input_tokens":4140,"output_tokens":605,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-118553':15A,18A '-2026':14A,17A '0.0.0':94C '1.4.11':96C '1.5.0':98C '1.5.2':100C 'affect':88C 'ai':2A,20B,23B,31B,80C,89C 'ai-modul':19B 'ai-tool':22B 'allow':43B,83C 'artifici':32B,81C,90C 'attack':50B 'browser':64B 'cms':28B 'content':54B 'cross':6A,46B,74C 'cross-sit':5A,45B,73C 'cve':13A,16A 'drupal':1A,25B,30B,79C 'fail':35B 'generat':12A,40B,72C 'improp':65C 'input':38B,68C 'intellig':33B,82C,91C 'issu':87C 'modul':3A,21B,34B 'neutral':37B,66C 'page':11A,42B,71C 'run':59B 'save':53B 'script':8A,48B,60B,76C 'site':7A,47B,57B,75C 'store':4A,44B,84C 'tool':24B 'user':63B 'version':92C 'vulner':77C 'web':10A,27B,41B,70C 'web-cm':26B 'xss':85C","nicknames":[],"mitigations":[],"who_affected":"Drupal sites that run the AI (Artificial Intelligence) module in the affected version ranges are exposed. The source does not say which AI features or roles are needed to store the malicious input, so sites with the module installed should be treated as exposed until checked.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"unknown","audience":"businesses","plain_action":null,"first_public_at":"2026-10-30T04:18:20+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-118553","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-118553","severity":null,"published_at":"2026-10-30T04:18:20+00:00","modified_at":"2026-10-30T04:18:20+00:00","first_seen_at":"2026-10-30T04:28:38+00:00","fetched_at":"2026-10-30T04:28:38+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}