{"id":"CVE-2026-84911","kind":"vulnerability","aliases":["CVE-2026-84911"],"related":[],"title":"Drupal AI module: stored XSS lets input run scripts in pages","description":"Improper Neutralization of Input During Web Page Generation (\"Cross-site Scripting\") vulnerability in Drupal AI (Artificial Intelligence) allows Stored XSS. This issue affects AI (Artificial Intelligence) versions: from 0.0.0 to 1.3.13, from 1.4.0 to 1.4.8.","summary":"The Drupal AI (Artificial Intelligence) module fails to neutralize input when generating web pages, so attacker-supplied content is stored and rendered as script. An attacker who can enter that content can run JavaScript in the browser of users who view the page.","severity":"low","cvss":3.1,"epss":0.0015,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["ai-tooling","cms","drupal","php"],"not_affected_if":["module-not-installed","trusted-editors-only"],"how_to_check":"- Check the installed AI module version with `drush pm:list --filter=ai` or the Drupal admin Extend page\n- Confirm whether the version is in the range 0.0.0 to 1.3.13 or 1.4.0 to 1.4.8","fix":"- Upgrade the Drupal AI module to a release later than `1.3.13` on the 1.3 line or later than `1.4.8` on the 1.4 line\n- Check the Drupal security advisory for the exact fixed release, which the sources do not name","status":"open","published_at":"2026-10-22T02:17:01+00:00","first_seen_at":"2026-10-23T21:57:30+00:00","triaged_at":"2026-10-25T04:47:24+00:00","updated_at":"2026-10-25T04:47:24+00:00","category":"ai-tooling","confidence":0.6,"triage":{"at":"2026-10-25T04:47:24Z","model":"claude-haiku-5-5","output":{"fix":"- Upgrade the Drupal AI module to a release later than `1.3.13` on the 1.3 line or later than `1.4.8` on the 1.4 line\n- Check the Drupal security advisory for the exact fixed release, which the sources do not name","reach":"internet","title":"Drupal AI module: stored XSS lets input run scripts in pages","impact":"medium","summary":"The Drupal AI (Artificial Intelligence) module fails to neutralize input when generating web pages, so attacker-supplied content is stored and rendered as script. An attacker who can enter that content can run JavaScript in the browser of users who view the page.","category":"ai-tooling","nicknames":[],"who_cares":["drupal","php","cms"],"confidence":0.6,"needs_auth":"unknown","worst_case":"Attacker script runs in victims' browsers on the site","analyst_note":"Confirm the fixed release version and which inputs are stored unescaped, using the Drupal security advisory for CVE-2026-84911.","how_to_check":"- Check the installed AI module version with `drush pm:list --filter=ai` or the Drupal admin Extend page\n- Confirm whether the version is in the range 0.0.0 to 1.3.13 or 1.4.0 to 1.4.8","needs_analyst":true,"not_affected_if":["module-not-installed","trusted-editors-only"],"who_is_affected":"Sites running the Drupal AI (Artificial Intelligence) module in the affected version ranges. Exposure depends on who can store content that other users later view, so sites with only trusted editors face less risk. Sites without the module can skip it.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"low"},"cost_usd":0.000635,"input_tokens":3379,"output_tokens":595,"severity_before":"low"},"analyst_status":null,"analyst_note":null,"search":"'-2026':13A,16A '-84911':14A,17A '0.0.0':97C '1.3.13':99C '1.4.0':101C '1.4.8':103C 'affect':91C 'ai':2A,19B,26B,83C,92C 'ai-tool':18B 'allow':86C 'artifici':27B,84C,93C 'attack':40B,50B 'attacker-suppli':39B 'browser':61B 'cms':21B 'content':42B,55B 'cross':77C 'cross-sit':76C 'cve':12A,15A 'drupal':1A,22B,25B,82C 'enter':53B 'fail':30B 'generat':35B,75C 'improp':68C 'input':7A,33B,71C 'intellig':28B,85C,94C 'issu':90C 'javascript':58B 'let':6A 'modul':3A,29B 'neutral':32B,69C 'page':11A,37B,67B,74C 'php':23B 'render':46B 'run':8A,57B 'script':9A,48B,79C 'site':78C 'store':4A,44B,87C 'suppli':41B 'tool':20B 'user':63B 'version':95C 'view':65B 'vulner':80C 'web':36B,73C 'xss':5A,88C","nicknames":[],"mitigations":[],"who_affected":"Sites running the Drupal AI (Artificial Intelligence) module in the affected version ranges. Exposure depends on who can store content that other users later view, so sites with only trusted editors face less risk. Sites without the module can skip it.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-22T02:17:01+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:N","cvss_by":"134c704f-9b21-4f2e-91b3-4a467353bcc0","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-84911","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84911","severity":null,"published_at":"2026-10-22T02:17:01+00:00","modified_at":"2026-10-22T16:54:17+00:00","first_seen_at":"2026-10-23T21:57:30+00:00","fetched_at":"2026-10-23T22:29:02+00:00","note":null},{"source":"epss","external_id":"CVE-2026-84911","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-84911","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-24T07:15:52+00:00","fetched_at":"2026-10-24T07:15:52+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}