Obfuscate Project vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Obfuscate Project products: 1 record(s), with severity, exploitation and fixes.

Exploited only (KEV) →

CVE-2026-6871 Medium · 6.1 CWE-79 May 19, 2026

Obfuscate - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-033

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Obfuscate allows Cross-Site Scripting (XSS). This issue affects Obfuscate: from 0.0.0 before 2.0.2.