CVE-2026-6871

Improper Neutralization of Input During Web Page Generation (“Cross-site Scripting”) vulnerability in Drupal Obfuscate allows Cross-Site Scripting (XSS).

This issue affects Obfuscate: from 0.0.0 before 2.0.2.

More information : https://www.drupal.org/sa-contrib-2026-033