{"id":"CVE-2026-114532","published":"2026-10-30T03:09:38Z","modified":"2026-10-30T03:09:38Z","title":"UI Icons - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-230","vendor":"Drupal","product":"UI Icons","tier":"tail","description":{"text":"Improper Neutralization of Input During Web Page Generation (\"Cross-site Scripting\") vulnerability in Drupal UI Icons allows Cross-Site Scripting (XSS). This issue affects UI Icons versions: from 0.0.0 to 1.1.3, from 2.0.0 to 2.0.2.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.00161,"percentile":0.05298,"provenance":"source"},"cwes":[{"id":"CWE-79","name":"Improper Neutralization of Input During Web Page Generation"}],"references":[{"url":"https://www.drupal.org/sa-contrib-2026-230","tags":[]}],"priority":{"score":1.1,"factors":[{"name":"EPSS percentile","points":1.06}]},"vendorSlug":"drupal","affectedVersions":[{"vendor":"Drupal","product":"UI Icons","versions":[">= 0.0.0, < 1.1.3",">= 2.0.0, < 2.0.2"]}],"affected":[{"ecosystem":"Packagist:https://packages.drupal.org/8","package":"drupal/ui_icons","vulnerableRanges":["<1.1.3",">=2.0.0, <2.0.2"],"patched":["1.1.3","2.0.2"],"from":["DRUPAL-CONTRIB-2026-230"],"provenance":"source"}],"euvd":{"id":"EUVD-2026-113542","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-drupal-ui-icons-cve-2026-2349","packageHistory":[{"cve":"CVE-2026-2349","published":"2026-03-25","fixed":"1.1.1","kev":false,"link":{"from":"CVE-2026-2349","to":"CVE-2026-114532","relation":"successor","confidence":"medium","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"Packagist:https://packages.drupal.org/8:drupal/ui_icons","fromFixed":"1.1.1","toFixed":"1.1.3","daysApart":219},{"kind":"similar","provenance":"machine","score":1.0,"basis":"same product + CWE + description similarity"}]}},{"cve":"CVE-2026-114527","published":"2026-10-30","fixed":"2.0.2","kev":false},{"cve":"CVE-2026-114532","published":"2026-10-30","fixed":"2.0.2","kev":false}],"package":"Packagist:https://packages.drupal.org/8:drupal/ui_icons"}}