CVE-2026-3215Disclosure(islandora / islandora)

LOWCVSS 5.4 · MEDIUM

Signal is active with 2 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Islandora allows Cross-Site Scripting (XSS).This issue affects Islandora: from 0.0.0 before 2.17.5.

islandora CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://www.drupal.org/sa-contrib-2026-016

Weakness type (CWE)

CWE-79

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

islandora

Threat summary

2 mentions across 1 observed day

What's happening

Technical details provided in 2 signals
Disclosure: 2 classified signals
2 total mentions across 1 day

Affected systems

Vendors

islandora

Products

islandora

Deep dive

Activity timeline2 mentions / 1d

Signal classification1 categories

Disclosure

2100.0%

Referenced assets2 URLs

By indicator

Full discourse2 posts

Infoflowcloud@infoflowcloud192d
Disclosure
🚨*CVE* CVE-2026-3215 Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Islandora allows Cross-Site Scripting (XSS).This issue affe… https://www.cve.org/CVERecord?id=CVE-2026-3215 ----- Traducción: CVE-2026-3215 Neu… http://infoflow.cloud`
Post summary
The tweet announces CVE-2026-3215, describing it as a cross‑site scripting flaw in Drupal Islandora, but provides no proof of concept, exploit, or mitigation information.
0000037
62 followersView on X
CVE@CVEnew192d
Disclosure
CVE-2026-3215 Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Islandora allows Cross-Site Scripting (XSS).This issue affe… https://www.cve.org/CVERecord?id=CVE-2026-3215
Post summary
The entry describes an XSS vulnerability in Drupal Islandora (CVE-2026-3215) with no PoC, exploit, patch, or active exploitation details provided.
00000199
56.8K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	islandora	islandora	-	drupal	-

Explore more

Back to dashboard islandora CVEs islandora vulnerabilities