https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T10:05:57.477456+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/drupal-contrib-2025-016 DRUPAL-CONTRIB-2025-016 2026-10-16T10:05:57.554041+00:00

Affected: Packagist:https://packages.drupal.org/8: drupal/spamspan

This module enables your site to obfuscate Email addresses and prevent spambots to collect them.

The module doesn't sanitize HTML data attributes when an email address link is transformed to separate span HTML elements and then transformed back by JavaScript leading to a Cross Site Scripting (XSS) vulnerability.

This is mitigated by the fact an attacker must be able to insert span HTML elements with data attributes in the page.

 https://cve.radiocsirt.org/vuln/euvd-2026-235672 EUVD-2026-235672 2026-10-16T10:05:57.554102+00:00 EUVD-2026-235672 https://cve.radiocsirt.org/vuln/fkie_cve-2025-31687 fkie_cve-2025-31687 2026-10-16T10:05:57.554118+00:00

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal SpamSpan filter allows Cross-Site Scripting (XSS).This issue affects SpamSpan filter: from 0.0.0 before 3.2.1.

 https://cve.radiocsirt.org/vuln/ghsa-8r2q-865v-wm8j GHSA-8r2q-865v-wm8j — Drupal SpamSpan Cross-Site Scripting (XSS) vulnerability 2026-10-16T10:05:57.554140+00:00

Affected: Packagist: drupal/spamspan

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal SpamSpan filter allows Cross-Site Scripting (XSS). This issue affects SpamSpan filter: from 0.0.0 before 3.2.1.