Drupal
Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-012
SA-CORE-2026-012 Jul 15, 2026 Source: Vendor
Imported by the Drupal advisory catcher from https://www.drupal.org/sa-core-2026-012. 1 reporter(s), 4 fixer(s). Draft. Review before publishing.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://www.drupal.org/sa-core-2026-012
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.
Credited
5 lines
Showing 1–5 of 5
CVE-2026-55805
BR2026-0000-007322
unclaimed
Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-012
Credited as haii haii (hai27ii2o)
CVE-2026-55805
BR2026-0000-007323
unclaimed
Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-012
Credited as danielveza
CVE-2026-55805
BR2026-0000-007324
unclaimed
Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-012
Credited as Lee Rowlands (larowlan) of the Drupal Security Team
CVE-2026-55805
BR2026-0000-007325
unclaimed
Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-012
Credited as Mingsong (mingsong) provisional member of the Drupal Security Team
CVE-2026-55805
BR2026-0000-007326
unclaimed
Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-012
Credited as James Gilliland (neclimdul) of the Drupal Security Team