SQL Injection in Drupal Location Selector
CVE-2026-15081
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal Location Selector allows SQL Injection. This issue affects Location Selector versions: from 0.0.0 to 1.3.0.
Vulnerability class: SQL Injection
Affected products
- Drupal Location Selector — versions 0.0.0