CVE-2026-81167: Address Suggestion Project Address Suggestion

Medium severity, CVSS 4.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Address Suggestion allows Cross-Site Scripting (XSS). This issue affects Address Suggestion versions: from 0.0.0 to 1.0.25.

Affected products

• Address Suggestion Project Address Suggestion: before 1.0.25 (fixed in 1.0.25)

Published 2026-09-02. Last modified 2026-09-09.