En resumen
- CVE-2026-114531 es una vulnerabilidad MEDIO (CVSS 6.5) que afecta a drupal/swiper_formatter.
- Probabilidad de explotación en los próximos 30 días (EPSS): 0.16%, mayor que el 5.3% de las vulnerabilidades.
- Solución: actualizar a 3.1.0, 2.1.2 o posterior.
| Package | Affected versions | Patched versions |
|---|
| drupal/swiper_formatter Packagist:https://packages.drupal.org/8 | ≥ 3.0.1, < 3.1.0< 2.1.2
| 3.1.02.1.2
|
Description
The module provides integration with third party JS library SwiperJs.
User-entered text is used as part of the slide without appropriate filtering leading to a cross-site scripting (XSS) vulnerability.
This vulnerability is mitigated by the fact that an attacker would need a role with permission to edit the caption.
NVD description
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Swiper formatter allows Stored XSS. This issue affects Swiper formatter versions: from 0.0.0 to 2.1.2, from 3.0.1 to 3.1.0.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free