AIKIDO-2026-459847
drupal/address_suggestion is vulnerable to Cross-site Scripting (XSS)
50
Medium Risk
This Affects:
drupal/address_suggestionTL;DR
A cross-site scripting (XSS) vulnerability in the Address Suggestion module allows malicious content from configured address providers to be executed in the user's browser. Exploitation requires an attacker to inject malicious data into a provider's response and a user to perform a search returning the malicious suggestion.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range.
Background info
drupal/address_suggestion is vulnerable to Cross-site Scripting (XSS) in versions 0.0.1 - 1.0.24.
How to fix this
Upgrade the drupal/address_suggestion library to the patch version.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.