https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 23 Oct 2026 00:01:24 +0000 https://db.gcve.eu/vuln/drupal-contrib-2026-131 <p><strong>Affected:</strong> Packagist:https://packages.drupal.org/8: drupal/photoswipe</p> <p>This module enables you to add dynamic caption support to PhotoSwipe image galleries.</p> <p>The module doesn&#39;t sufficiently sanitize user-supplied input (such as image alt tags) in its dynamic caption script, leading to a Cross-Site Scripting (XSS) vulnerability.</p> <p>This vulnerability is mitigated by the fact that an attacker must have a role that permits them to enter HTML content.</p> <p><strong>Affected:</strong> Packagist:https://packages.drupal.org/8: drupal/photoswipe</p> <p>This module enables you to add dynamic caption support to PhotoSwipe image galleries.</p> <p>The module doesn&#39;t sufficiently sanitize user-supplied input (such as image alt tags) in its dynamic caption script, leading to a Cross-Site Scripting (XSS) vulnerability.</p> <p>This vulnerability is mitigated by the fact that an attacker must have a role that permits them to enter HTML content.</p> https://db.gcve.eu/vuln/drupal-contrib-2026-131 https://db.gcve.eu/vuln/fkie_cve-2026-84919 <p>Improper Neutralization of Input During Web Page Generation (&#34;Cross-site Scripting&#34;) vulnerability in Drupal PhotoSwipe - Responsive JavaScript Modal Image Gallery allows Stored XSS. This issue affects PhotoSwipe - Responsive JavaScript Modal Image Gallery versions: from 0.0.0 to 5.0.9.</p> <p>Improper Neutralization of Input During Web Page Generation (&#34;Cross-site Scripting&#34;) vulnerability in Drupal PhotoSwipe - Responsive JavaScript Modal Image Gallery allows Stored XSS. This issue affects PhotoSwipe - Responsive JavaScript Modal Image Gallery versions: from 0.0.0 to 5.0.9.</p> https://db.gcve.eu/vuln/fkie_cve-2026-84919 https://db.gcve.eu/vuln/ghsa-hpqh-524w-2rhc <p>Improper Neutralization of Input During Web Page Generation (&#34;Cross-site Scripting&#34;) vulnerability in Drupal PhotoSwipe - Responsive JavaScript Modal Image Gallery allows Stored XSS. This issue affects PhotoSwipe - Responsive JavaScript Modal Image Gallery versions: from 0.0.0 to 5.0.9.</p> <p>Improper Neutralization of Input During Web Page Generation (&#34;Cross-site Scripting&#34;) vulnerability in Drupal PhotoSwipe - Responsive JavaScript Modal Image Gallery allows Stored XSS. This issue affects PhotoSwipe - Responsive JavaScript Modal Image Gallery versions: from 0.0.0 to 5.0.9.</p> https://db.gcve.eu/vuln/ghsa-hpqh-524w-2rhc https://db.gcve.eu/vuln/wid-sec-w-2026-3168 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in verschiedenen Drupal Erweiterungen ausnutzen, um Zugriffsbeschränkungen zu umgehen, geschützte oder sensible Inhalte offenzulegen, Benutzerkonten zu übernehmen, unberechtigte Änderungen oder Löschungen vorzunehmen, Zahlungsstatus zu manipulieren sowie Cross-Site-Scripting-Angriffe auszuführen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in verschiedenen Drupal Erweiterungen ausnutzen, um Zugriffsbeschränkungen zu umgehen, geschützte oder sensible Inhalte offenzulegen, Benutzerkonten zu übernehmen, unberechtigte Änderungen oder Löschungen vorzunehmen, Zahlungsstatus zu manipulieren sowie Cross-Site-Scripting-Angriffe auszuführen.</p> https://db.gcve.eu/vuln/wid-sec-w-2026-3168