entity_browser_project has 1 CVE on record. 1 was published in the last 90 days. The median CVSS is 4.8 (medium).

CVEs per month

Last 12 months, by publish date

1025/101125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/09

Exploited share: 0% vs 1% corpus
Median CVSS: 4.8
Publish → KEV: —
Last 90 days: 1 prev 0

Weakness classes

CWE-79 1

Products

entity_browser 1

Follow entity_browser_project:RSS feed Save a search →Embed badge ↗

1

Total CVEs

0

Critical

0

CISA KEV

0

Exploited

Worst active — by depth score

CVE-2026-18986Medium· 4.8Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Entity Browser allows Stored XSS26

entity_browser_project vulnerabilities

CVEs affecting entity_browser_project, newest first. Open any entry for full detail, references, and exploit status.

1 CVERSS

CVE-2026-18986Medium· 4.8

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Entity Browser allows Stored XSS

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Entity Browser allows Stored XSS. This issue affects Entity Browser versions: from 0.0.0 to 2.16.0.

▾ Sunlitentity_browser_project · entity_browserEPSS 0.14%via NVD

entity_browser_project vulnerabilities (CVEs) · VulnSea