CVE-2026-107260
Received Received - Intake

Stored XSS in Drupal Sector Distribution

Publication date: 2026-10-30

Last updated on: 2026-10-30

Assigner: Drupal.org

Description
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Sector Distribution allows Stored XSS. This issue affects Sector Distribution versions: from 0.0.0 to 10.3.3, from 10.4.0 to 10.4.2.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-30
Last Modified
2026-10-30
Generated
2026-10-30
AI Q&A
2026-10-30
EPSS Evaluated
N/A
NVD
CVE-2026-107260
EUVD
EUVD-2026-113543

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
Drupal Sector Distribution 0.0.0
Drupal Sector Distribution 10.4.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-79 The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a Stored Cross-site Scripting (XSS) vulnerability in Drupal Sector Distribution. It allows attackers to inject malicious scripts into web pages that are stored on the server. When other users view the affected pages, the injected scripts execute in their browsers.

Impact Analysis

Stored XSS can lead to unauthorized actions on behalf of users, theft of sensitive data like session cookies or credentials, defacement of web pages, or redirection to malicious sites. Users interacting with compromised pages may have their accounts compromised or personal information exposed.

Compliance Impact

Stored XSS can result in data breaches, which may violate GDPR (data protection) and HIPAA (health information privacy). Organizations could face fines, legal action, and reputational damage for failing to protect user data from such vulnerabilities.

Mitigation Strategies

Update Drupal Sector Distribution to the latest version that is not affected by this vulnerability. Specifically, upgrade to a version beyond 10.4.2 or apply patches if available.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-107260. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart