Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Anti-Spam by CleanTalk allows Cross-Site Scripting (XSS).This issue affects Anti-Spam by CleanTalk: from 0.0.0 before 9.7.0.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-3213 Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Anti-Spam by CleanTalk allows Cross-Site Scripting (XSS).Th… https://www.cve.org/CVERecord?id=CVE-2026-3213
Post summary
The content cites the CVE record for CleanTalk’s Drupal Anti‑Spam module, highlighting an XSS flaw, but provides only the basic disclosure details without any PoC, exploit, or mitigation information.
🚨*CVE* CVE-2026-3213 Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Anti-Spam by CleanTalk allows Cross-Site Scripting (XSS).Th… https://www.cve.org/CVERecord?id=CVE-2026-3213 ----- Traducción: CVE-2026-3213 Des… http://infoflow.cloud`
Post summary
A brief announcement of CVE‑2026‑3213, an XSS vulnerability in Drupal Anti‑Spam by CleanTalk, is provided, with no PoC, exploit, patch, or evidence of active exploitation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | cleantalk | anti-spam | - | drupal | - |