CVE-2026-13234

Drupal AI versions 0.0.0 to 1.2.17, 1.3.0 to 1.3.8, and 1.4.0 to 1.4.3 are vulnerable to a Cross-Site Scripting (XSS) attack due to improper input neutralization during web page generation. This vulnerability could allow attackers to inject malicious scripts into web pages viewed by users, potentially compromising sensitive information or user sessions. Organizations using affected versions of Drupal AI should prioritize remediation to mitigate the risk of exploitation.