Vulnerability DRUPAL-CONTRIB-2026-299
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
4 hours ago
November 04, 2026 at 05:32 PM UTC
No summary available
<1.3.1
<1.3.1
Details
This module enables you to add syntax-highlighted code snippets to content using CKEditor 5.
The module doesn't sufficiently validate input passed to its CKEditor 5 preview endpoint, leading to a reflected cross-site scripting (XSS) vulnerability.
References
Impacted packages
Timeline
Published
4 hours ago
November 04, 2026 at 05:32 PM UTC
Last Modified
1 hour ago
November 04, 2026 at 08:30 PM UTC