En bref
- CVE-2026-114531 est une vulnérabilité MOYENNE (CVSS 6.5) touchant drupal/swiper_formatter.
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.16%, plus élevée que 5.3% des vulnérabilités.
- Correctif : mettre à jour vers 3.1.0, 2.1.2 ou plus récent.
| Package | Affected versions | Patched versions |
|---|
| drupal/swiper_formatter Packagist:https://packages.drupal.org/8 | ≥ 3.0.1, < 3.1.0< 2.1.2
| 3.1.02.1.2
|
Description
The module provides integration with third party JS library SwiperJs.
User-entered text is used as part of the slide without appropriate filtering leading to a cross-site scripting (XSS) vulnerability.
This vulnerability is mitigated by the fact that an attacker would need a role with permission to edit the caption.
NVD description
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Swiper formatter allows Stored XSS. This issue affects Swiper formatter versions: from 0.0.0 to 2.1.2, from 3.0.1 to 3.1.0.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free