XSS in Drupal Anti-spam By Cleantalk

CVE-2026-3213

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Anti-Spam by CleanTalk allows Cross-Site Scripting (XSS).This issue affects Anti-Spam by CleanTalk: from 0.0.0 before 9.7.0.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.000 (1.9th percentile) — read the EPSS interpretation.