CVE-2026-84919
This module enables you to add dynamic caption support to PhotoSwipe image galleries. The module doesn't sufficiently sanitize user-supplied input (s...
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
This module enables you to add dynamic caption support to PhotoSwipe image galleries.
The module doesn't sufficiently sanitize user-supplied input (such as image alt tags) in its dynamic caption script, leading to a Cross-Site Scripting (XSS) vulnerability.
This vulnerability is mitigated by the fact that an attacker must have a role that permits them to enter HTML content.
影響パッケージ
Packagist:https://packages.drupal.org/8
drupal/photoswipe
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.9"}],"database_specific":{"constraint":"<5.0.9"}}]
参照URL
- web drupal.org