CVE-2026-13242
CVE-2026-13242 · Geolocation Field - Critical - SQL Injection - SA-CONTRIB-2026-062
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal Geolocation Field allows SQL Injection. This issue affects Geolocation Field versions: from 0.0.0 to 3.15.0.
CVSS 6.5 · Medium · EPSS 0.3% · Fix available
- Published
- Updated
Stack: php
Affected products and versions
geolocation field
- Versions
- ≥ 0.0.0, < 3.15.0: Affected (semver)
Update to 3.15.0
drupal/geolocation Packagist:https://packages.drupal.org/8
- Affected ranges
- ECOSYSTEM: < 3.15.0
Update to 3.15.0