CVE-2026-0947: AT Internet Piano Analytics - Moderately critical - Cross-site Scripting - SA-CONTRIB-2026-004
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AT Internet Piano Analytics allows Cross-Site Scripting (XSS).This issue affects AT Internet Piano Analytics: from 0.0.0 before 1.0.1, from 2.0.0 before 2.3.1.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-0947?
CVE-2026-0947 is classified as moderately critical due to its potential for Cross-Site Scripting (XSS) attacks.
How do I fix CVE-2026-0947?
To fix CVE-2026-0947, upgrade the AT Internet Piano Analytics module to version 2.3.2 or later.
Which versions of AT Internet Piano Analytics are affected by CVE-2026-0947?
CVE-2026-0947 affects versions 0.0.0 to 1.0.1 and 2.0.0 to 2.3.1 of the AT Internet Piano Analytics module.
What type of vulnerability is CVE-2026-0947?
CVE-2026-0947 is a Cross-Site Scripting (XSS) vulnerability.
Is CVE-2026-0947 specific to any CMS?
Yes, CVE-2026-0947 specifically affects the Drupal content management system, particularly the AT Internet Piano Analytics module.