CVE-2026-15081 | Improper Neutralization of Special Elements used in an SQL C…

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal Location Selector allows SQL Injection. This issue affects Location Selector versions: from 0.0.0 to 1.3.0.

Metadata

CVE ID: CVE-2026-15081
State: PUBLISHED
Assigner: drupal
Reserved: 2026-07-08 15:44 UTC
Published: 2026-07-10 21:46 UTC
Last updated: 2026-07-10 21:46 UTC
Primary CWE: CWE-89
CWE-89 Improper Neutralization of Special Elements used in a…
Vendor / Product: Drupal / Location Selector
Sources: cve.org · NVD

Severity & Metrics

No CVSS data available.

Affected products (1)

Vendor	Product	Platform	Versions
Drupal	Location Selector	—	0.0.0 < 1.3.0

Weakness (CWE)

CWE	Source	Description
CWE-89	cna	CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

References (1)

https://www.drupal.org/sa-contrib-2026-072