VULNERABILITY INTELLIGENCE
CVE-2026-13242
CVSS score6.5 MEDIUM
EPSS probability0.28%
CISA KEVNot currently listed
Published2026-07-10
Last modified2026-10-25
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal Geolocation Field allows SQL Injection. This issue affects Geolocation Field versions: from 0.0.0 to 3.15.0.