未評価
The module provides integration with third party JS library SwiperJs. User-entered text is used as part of the slide without appropriate filtering le...
CVE-2026-114531
SecPulse初出
影響パッケージ
| 種類 | パッケージ | 影響を受ける版 | 直った版 |
|---|---|---|---|
| Packagist:https://packages.drupal.org/8 | drupal/swiper_formatter |
2.1.2 未満 3.0.1 以上 3.1.0 未満 |
2.1.2 3.1.0 |
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
The module provides integration with third party JS library SwiperJs.
User-entered text is used as part of the slide without appropriate filtering leading to a cross-site scripting (XSS) vulnerability.
This vulnerability is mitigated by the fact that an attacker would need a role with permission to edit the caption.
参照URL
- web drupal.org