CVE-2026-114555

8th percentile - higher than 8% of all known CVEs

The vulnerability in the Drupal Data field module involves improper neutralization of input during web page generation, allowing Stored XSS. This issue affects versions from 0.0.0 to 2.0.14.

Stored XSS may allow an attacker to execute malicious script in a user's browser, potentially leading to session or data theft. The threat is particularly relevant for users with administrative privileges.

Update the Data field module to a version later than 2.0.14. Additionally, consider implementing a Content Security Policy (CSP) to mitigate XSS impact.