Description The mail template feature lacks an escaping mechanism, causing XSS vectors in multiple extensions. Remediation References CVE-2024-27186 Related Vulnerabilities Drupal Core 7.x Multiple Vulnerabilities (7.0 - 7.10) WordPress Plugin SEO Backlinks Cross-Site Request Forgery (4.0.1) Dolibarr Missing Authorization Vulnerability (CVE-2018-10092) Moodle Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2026-26046) Joomla Improper Privilege Management Vulnerability (CVE-2012-1563) Severity Medium Classification CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Tags Missing Update Known Vulnerabilities CWE-707 CVE-2024-27186