Question 1

What is CVE-2026-118560 — CVE-2026-118560?

Accepted Answer

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Commerce Stripe allows Cross-Site Scripting (XSS). This issue affects Commerce Stripe versions: from 2.0.0 to 2.2.3.

Question 2

What is the authoritative source for CVE-2026-118560?

Accepted Answer

CVE-2026-118560 (CVE-2026-118560) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVE-2026-118560CVE-2026-118560

Description

Scoring