Drupal AI (Artificial Intelligence) vulnerabilities

8 vulnerabilities

Known vulnerabilities in Drupal AI (Artificial Intelligence), newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

4.4CVE-2025-13981artificial_intelligence_projectartificial_intelligence+1
EPSS score
0.14%
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI (Artificial Intelligence) allows Cross-Site Scripting (XSS).This issue affects AI (Artificial Intelligence): from 0.0.0 before 1.0.7, from 1.1.0 before 1.1.7, from 1.2.0 before 1.2.4.8.2CVE-2025-31678artificial_intelligence_projectartificial_intelligence+1
EPSS score
0.37%
Missing Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Forceful Browsing.This issue affects AI (Artificial Intelligence): from 0.0.0 before 1.0.3.7.5CVE-2025-31692artificial_intelligence_projectartificial_intelligence+1
EPSS score
0.76%
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Drupal AI (Artificial Intelligence) allows OS Command Injection.This issue affects AI (Artificial Intelligence): from 0.0.0 before 1.0.5.6.6CVE-2025-31693artificial_intelligence_projectartificial_intelligence+1
EPSS score
0.74%
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Drupal AI (Artificial Intelligence) allows OS Command Injection.This issue affects AI (Artificial Intelligence): from 0.0.0 before 1.0.5.8.8CVE-2025-31677artificial_intelligence_projectartificial_intelligence+1
EPSS score
0.22%
Cross-Site Request Forgery (CSRF) vulnerability in Drupal AI (Artificial Intelligence) allows Cross Site Request Forgery.This issue affects AI (Artificial Intelligence): from 1.0.0 before 1.0.2.3.3CVE-2026-13235artificial_intelligence_projectartificial_intelligence+1
EPSS score
0.21%
Missing Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Forceful Browsing. This issue affects AI (Artificial Intelligence) versions: from 0.0.0 to 1.2.17, from 1.3.0 to 1.3.8, from 1.4.0 to 1.4.3.6.1CVE-2026-13234artificial_intelligence_projectartificial_intelligence+1
EPSS score
0.25%
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI (Artificial Intelligence) allows Cross-Site Scripting (XSS). This issue affects AI (Artificial Intelligence) versions: from 0.0.0 to 1.2.17, from 1.3.0 to 1.3.8, from 1.4.0 to 1.4.3.7.5CVE-2026-3573artificial_intelligence_projectartificial_intelligence+1
EPSS score
0.39%
Incorrect Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Resource Injection.This issue affects AI (Artificial Intelligence): from 0.0.0 before 1.1.11, from 1.2.0 before 1.2.12.