Drupal AI (Artificial Intelligence) contains a stored cross‑site scripting flaw that lets an attacker embed malicious JavaScript into pages that are later rendered for other users. The injected script can hijack a user’s session, deface content, or leak sensitive information. The vulnerability originates from improper neutralization of input during web‑page generation.

The flaw affects Drupal AI versions 0.0.0 through 1.3.13 and 1.4.0 through 1.4.8, a module that extends Drupal CMS with AI‑powered features.

The EPSS score is < 1% and the vulnerability is not listed in CISA KEV, so no public exploitation data is recorded. The CVSS score of 3.1 indicates low severity, but the flaw’s nature allows arbitrary script execution if an attacker can submit content. While the official documentation does not specify an attack vector, it is inferred that any interface permitting user input that is later rendered would be vulnerable. Existing mitigations such as input sanitization are therefore crucial, though no formal patch or workaround has been announced.