Non évaluée
The module provides integration with third party JS library SwiperJs. User-entered text is used as part of the slide without appropriate filtering le...
CVE-2026-114531
Première détection SecPulse
Paquets affectés
| Écosystème | Paquet | Concernées | Corrigé |
|---|---|---|---|
| Packagist:https://packages.drupal.org/8 | drupal/swiper_formatter |
< 2.1.2 ≥ 3.0.1, < 3.1.0 |
2.1.2 3.1.0 |
Description d'origine La description telle que publiée par la source (souvent en anglais).
The module provides integration with third party JS library SwiperJs.
User-entered text is used as part of the slide without appropriate filtering leading to a cross-site scripting (XSS) vulnerability.
This vulnerability is mitigated by the fact that an attacker would need a role with permission to edit the caption.
Références
- web drupal.org