CVE-2026-122083
CVE-2026-122083 is a vulnerability with no CVSS score yet in drupal/adobe_analytics, published November 4, 2026. No source lists public exploit code. Fixed in drupal/adobe_analytics 1.1.0.
- Severity
- UnratedNo CVSS score yet
- Exploit chance
- UnscoredNo EPSS score yet
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
1.1.0drupal/adobe_analytics
Description
This module integrates the Site Catalyst or AdobeAnalytics software into a Drupal site.
The module does not sufficiently provide access controls for advanced functionality, which exposes a cross-site scripting (XSS) vulnerability.
This vulnerability is mitigated by the fact that an attacker must have permission to add or edit content that is configured to use the module's functionality.
Affected packages
| Package | Affected | Fixed |
|---|---|---|
drupal/adobe_analyticsPackagist:https://packages.drupal.org/8 | before 1.1.0 | 1.1.0 |
What each source reports
OSVDRUPAL-CONTRIB-2026-311No score
This module integrates the Site Catalyst or AdobeAnalytics software into a Drupal site.
The module does not sufficiently provide access controls for advanced functionality, which exposes a cross-site scripting (XSS) vulnerability.
This vulnerability is mitigated by the fact that an attacker must have permission to add or edit content that is configured to use the module's functionality.
- Record
DRUPAL-CONTRIB-2026-311- Updated
- 2026-11-04
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.