https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-23T00:01:23.396379+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/drupal-contrib-2026-131 DRUPAL-CONTRIB-2026-131 2026-10-23T00:01:23.419588+00:00

Affected: Packagist:https://packages.drupal.org/8: drupal/photoswipe

This module enables you to add dynamic caption support to PhotoSwipe image galleries.

The module doesn't sufficiently sanitize user-supplied input (such as image alt tags) in its dynamic caption script, leading to a Cross-Site Scripting (XSS) vulnerability.

This vulnerability is mitigated by the fact that an attacker must have a role that permits them to enter HTML content.

 https://db.gcve.eu/vuln/fkie_cve-2026-84919 fkie_cve-2026-84919 2026-10-23T00:01:23.419680+00:00

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal PhotoSwipe - Responsive JavaScript Modal Image Gallery allows Stored XSS. This issue affects PhotoSwipe - Responsive JavaScript Modal Image Gallery versions: from 0.0.0 to 5.0.9.

 https://db.gcve.eu/vuln/ghsa-hpqh-524w-2rhc GHSA-hpqh-524w-2rhc 2026-10-23T00:01:23.419725+00:00

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal PhotoSwipe - Responsive JavaScript Modal Image Gallery allows Stored XSS. This issue affects PhotoSwipe - Responsive JavaScript Modal Image Gallery versions: from 0.0.0 to 5.0.9.

 https://db.gcve.eu/vuln/wid-sec-w-2026-3168 WID-SEC-W-2026-3168 — Drupal Erweiterungen: Mehrere Schwachstellen 2026-10-23T00:01:23.419750+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in verschiedenen Drupal Erweiterungen ausnutzen, um Zugriffsbeschränkungen zu umgehen, geschützte oder sensible Inhalte offenzulegen, Benutzerkonten zu übernehmen, unberechtigte Änderungen oder Löschungen vorzunehmen, Zahlungsstatus zu manipulieren sowie Cross-Site-Scripting-Angriffe auszuführen.