CVE-2026-3528
This module extends the Drupal form API adding "Calculation element" form element types, which can evaluate a maths expression. It offers webform inte...
Original description
The description as published by the source.
This module extends the Drupal form API adding "Calculation element" form element types, which can evaluate a maths expression. It offers webform integration.
The module doesn't sufficiently validate user input; this could be exploited to achieve Information Disclosure or Cross-site Scripting (XSS).
Affected packages
Packagist:https://packages.drupal.org/8
drupal/calculation_fields
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.4"}],"database_specific":{"constraint":"<1.0.4"}}]
References
- web drupal.org