CVE-2026-84919
This module enables you to add dynamic caption support to PhotoSwipe image galleries. The module doesn't sufficiently sanitize user-supplied input (s...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
This module enables you to add dynamic caption support to PhotoSwipe image galleries.
The module doesn't sufficiently sanitize user-supplied input (such as image alt tags) in its dynamic caption script, leading to a Cross-Site Scripting (XSS) vulnerability.
This vulnerability is mitigated by the fact that an attacker must have a role that permits them to enter HTML content.
Paquets affectés
Packagist:https://packages.drupal.org/8
drupal/photoswipe
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.9"}],"database_specific":{"constraint":"<5.0.9"}}]
Références
- web drupal.org