{"id":"DRUPAL-CONTRIB-2026-014","aliases":["CVE-2026-3213"],"title":"DRUPAL-CONTRIB-2026-014","description":"This module enables you to block bots by Firewall.\n\nThe module doesn't sufficiently sanitize user input leading to a reflected Cross-site scripting (XSS) vulnerability.\n\nThis vulnerability is mitigated by the fact that the vulnerable functionality is only presented to users that are \"challenged\" or blocked by the firewall.","severity":"unknown","score":null,"published":"2026-02-25T18:46:10.000Z","modified":"2026-09-10T03:45:23.825Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Packagist:https://packages.drupal.org/8","name":"drupal/cleantalk","ranges":[{"events":[{"introduced":"0"},{"fixed":"9.7.0"}],"type":"ECOSYSTEM","database_specific":{"constraint":"<9.7.0"}}],"versions":[],"fixed":["9.7.0"]}],"references":["https://www.drupal.org/sa-contrib-2026-014"],"sources":[{"name":"OSV","id":"DRUPAL-CONTRIB-2026-014","modified":"2026-09-10T03:45:23.825462510Z","url":"https://osv.dev/vulnerability/DRUPAL-CONTRIB-2026-014"}],"assessments":[]}