CVE-2026-114531
CVE-2026-114531 · DRUPAL-CONTRIB-2026-228
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
The module provides integration with third party JS library SwiperJs. User-entered text is used as part of the slide without appropriate filtering leading to a cross-site scripting (XSS) vulnerability. This vulnerability is mitigated by the fact that an attacker would need a role with permission to edit the caption.
Corrección disponible
- Publicación
- Actualización
Pila tecnológica: php
Productos y versiones afectados
drupal/swiper_formatter Packagist:https://packages.drupal.org/8
- Intervalos de versiones afectados
- ECOSYSTEM: < 2.1.2
- ECOSYSTEM: ≥ 3.0.1, < 3.1.0
Actualiza a 2.1.2; Actualiza a 3.1.0