Security Advisory
CVE-2026-15084
5.4
MEDIUM
Vulnerability Description
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal UI Patterns (SDC in Drupal UI) allows Stored XSS. This issue affects UI Patterns (SDC in Drupal UI) versions: from 2.0.0 to 2.0.17.
Published Date
July 10, 2026
Official Source
NIST NVD Advisory