Drupal
Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-012
SA-CORE-2026-012 Jul 15, 2026 Source: Vendor
Imported by the Drupal advisory catcher from https://www.drupal.org/sa-core-2026-012. 1 reporter(s), 4 fixer(s). Draft. Review before publishing.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://www.drupal.org/sa-core-2026-012
Are you credited here?
Sign in and claim your line: it is yours immediately, no review queue.
The name the vendor printed stays next to your handle for anyone to check against the advisory above,
and any member who thinks a claim is wrong can refute it.
Credited
5 lines
Showing 1–5 of 5
CVE-2026-55805
BR2026-0000-007322
unclaimed
Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-012
Credited as haii haii (hai27ii2o)
CVE-2026-55805
BR2026-0000-007323
unclaimed
Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-012
Credited as danielveza
CVE-2026-55805
BR2026-0000-007324
unclaimed
Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-012
Credited as Lee Rowlands (larowlan) of the Drupal Security Team
CVE-2026-55805
BR2026-0000-007325
unclaimed
Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-012
Credited as Mingsong (mingsong) provisional member of the Drupal Security Team
CVE-2026-55805
BR2026-0000-007326
unclaimed
Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-012
Credited as James Gilliland (neclimdul) of the Drupal Security Team