Question 1

What is CVE-2026-118575 — CVE-2026-118575?

Accepted Answer

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Signature pad widget allows Stored XSS. This issue affects Signature pad widget versions: from 0.0.0 to 1.15.0.

Question 2

What is the authoritative source for CVE-2026-118575?

Accepted Answer

CVE-2026-118575 (CVE-2026-118575) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVE-2026-118575CVE-2026-118575

Description

Scoring