CERT24CVE-2026-118575 — Signature pad widget – Critical – Cross-site scripting – SA-CONTRIB-2026-285Loading data…
CERT24Threat Observatory
Period

CVE-2026-118575 — Signature pad widget – Critical – Cross-site scripting – SA-CONTRIB-2026-285

Signature pad widget enables users to create and save signatures as SVG images. The module did not sufficiently sanitize user-supplied content before saving it to the public file system, which may result in a stored XSS vulnerability under certain scenarios.

← Back to intelligence

CVE-2026-118575 — Signature pad widget – Critical – Cross-site scripting – SA-CONTRIB-2026-285

Signature pad widget enables users to create and save signatures as SVG images. The module did not sufficiently sanitize user-supplied content before saving it to the public file system, which may result in a stored XSS vulnerability under certain scenarios.