Unrated
The module provides integration with third party JS library SwiperJs. User-entered text is used as part of the slide without appropriate filtering le...
CVE-2026-114531
First seen on SecPulse
Affected packages
| Ecosystem | Package | Affected | Fixed |
|---|---|---|---|
| Packagist:https://packages.drupal.org/8 | drupal/swiper_formatter |
< 2.1.2 ≥ 3.0.1, < 3.1.0 |
2.1.2 3.1.0 |
Original description The description as published by the source.
The module provides integration with third party JS library SwiperJs.
User-entered text is used as part of the slide without appropriate filtering leading to a cross-site scripting (XSS) vulnerability.
This vulnerability is mitigated by the fact that an attacker would need a role with permission to edit the caption.
References
- web drupal.org