drupal Geolocation Field vulnerabilities

Latest drupal Geolocation Field CVEs

Newest publication first

1. CVE-2026-13242 Geolocation Field - Critical - SQL Injection - SA-CONTRIB-2026-062

   Published 2026-07-10

   Medium·CVSS 6.5 EPSS 0.28%

   Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal Geolocation Field allows SQL Injection. This issue affects Geolocation Field versions: from 0.0.0 to 3.15.0.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.