CVE-2026-84924

This module enables you to add an extra layer of verification for user registration. The module doesn't sufficiently filter user-supplied input befor...

Original description

The description as published by the source.

This module enables you to add an extra layer of verification for user registration.

The module doesn't sufficiently filter user-supplied input before output, resulting in an unauthenticated reflected Cross-site Scripting (XSS) vulnerability.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Affected packages

Packagist:https://packages.drupal.org/8 drupal/otp_verification

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.0"}],"database_specific":{"constraint":"<2.4.0"}}]

References

web drupal.org