Vulnerability DRUPAL-CONTRIB-2026-228
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
2 hours ago
October 21, 2026 at 05:42 PM UTC
No summary available
<2.1.2, >=3.0.1 <3.1.0
<2.1.2, >=3.0.1 <3.1.0
Details
The module provides integration with third party JS library SwiperJs.
User-entered text is used as part of the slide without appropriate filtering leading to a cross-site scripting (XSS) vulnerability.
This vulnerability is mitigated by the fact that an attacker would need a role with permission to edit the caption.
References
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Impacted packages
Timeline
Published
2 hours ago
October 21, 2026 at 05:42 PM UTC
Last Modified
1 hour ago
October 21, 2026 at 06:45 PM UTC