| Package | Affected versions | Patched versions |
|---|---|---|
| drupal/colorbox | ≥ 2.2.0, ≤ 2.2.0< 2.1.5 | 2.1.5 |
| colorbox | = 2.2.0< 2.1.5 | 2.1.5 |
The Colorbox module integrates with the Colorbox JavaScript library to display content in an overlay above the page.
The module doesn't sufficiently protect against injection of malicious JavaScript under certain scenarios.
This vulnerability is mitigated by the fact that an attacker must have a role that permits them to enter HTML content.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free