CVE-2026-13242

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal Geolocation Field allows SQL Injection. This issue affects Geolocation Field versions: from 0.0.0 to 3.15.0.

PUBLISHED Reserved 2026-06-24 | Published 2026-07-10 | Updated 2026-07-13 | Assigner drupal

Problem types

CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Product status

Credits

Michael Maturi (michaelmaturi) finder

Michael Maturi (michaelmaturi) remediation developer

Christian Adamski (christianadamski) remediation developer

cilefen (cilefen) coordinator

Neil Drumm (drumm) coordinator

Greg Knaddison (greggles) coordinator

Drew Webber (mcdruid) coordinator

Juraj Nemec (poker10) coordinator

References

www.drupal.org/sa-contrib-2026-062

cve.org (CVE-2026-13242)

nvd.nist.gov (CVE-2026-13242)

Download JSON