Search

Find a vulnerability

Search criteria

    4 vulnerabilities found for Swiper formatter by Drupal

    CVE-2026-114535 (GCVE-0-2026-114535)

    Vulnerability from nvd – Published: 2026-10-30 03:09 – Updated: 2026-10-30 03:09
    VLAI
    Title
    Swiper formatter - Moderately critical - Information disclosure - SA-CONTRIB-2026-233
    Summary
    Missing Authorization vulnerability in Drupal Swiper formatter allows Forceful Browsing. This issue affects Swiper formatter versions: from 0.0.0 to 2.1.2, from 3.0.1 to 3.1.0.
    Severity
    No CVSS data available.
    CWE
    Assigner
    drupal CNA under the mitre root
    CNA scorecard D 53/100 over 279 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Drupal Swiper formatter Affected: 0.0.0 , < 2.1.2 (semver)
    Affected: 3.0.1 , < 3.1.0 (semver)
    		Create a notification for this product.
    Date Public
    2026-10-21 17:46
    Credits
    Ryan Solomon (phizes) Julian Pustkuchen (anybody) Joshua Sedler (grevil) Drupal Lady (bbu23) Joshua Sedler (grevil) Swan Kalata (akalata) Greg Knaddison (greggles) Juraj Nemec (poker10)
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "collectionURL": "https://www.drupal.org/project/swiper_formatter",
          "product": "Swiper formatter",
          "repo": "https://git.drupalcode.org/project/swiper_formatter",
          "vendor": "Drupal",
          "versions": [
            {
              "lessThan": "2.1.2",
              "status": "affected",
              "version": "0.0.0",
              "versionType": "semver"
            },
            {
              "lessThan": "3.1.0",
              "status": "affected",
              "version": "3.0.1",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Ryan Solomon (phizes)"
        },
        {
          "lang": "en",
          "type": "finder",
          "value": "Julian Pustkuchen (anybody)"
        },
        {
          "lang": "en",
          "type": "finder",
          "value": "Joshua Sedler (grevil)"
        },
        {
          "lang": "en",
          "type": "remediation developer",
          "value": "Drupal Lady (bbu23)"
        },
        {
          "lang": "en",
          "type": "remediation developer",
          "value": "Joshua Sedler (grevil)"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "Swan Kalata (akalata)"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "Greg Knaddison (greggles)"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "Juraj Nemec (poker10)"
        }
      ],
      "datePublic": "2026-10-21T17:46:29.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Missing Authorization vulnerability in Drupal Swiper formatter allows Forceful Browsing. This issue affects Swiper formatter versions: from 0.0.0 to 2.1.2, from 3.0.1 to 3.1.0."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-87",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-87 Forceful Browsing"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-862",
              "description": "CWE-862 Missing Authorization",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-30T03:09:35.861Z",
        "orgId": "2c85b837-eb8b-40ed-9d74-228c62987387",
        "shortName": "drupal"
      },
      "references": [
        {
          "url": "https://www.drupal.org/sa-contrib-2026-233"
        }
      ],
      "title": "Swiper formatter - Moderately critical - Information disclosure - SA-CONTRIB-2026-233"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "2c85b837-eb8b-40ed-9d74-228c62987387",
    "assignerShortName": "drupal",
    "cveId": "CVE-2026-114535",
    "datePublished": "2026-10-30T03:09:35.861Z",
    "dateReserved": "2026-10-21T17:08:25.388Z",
    "dateUpdated": "2026-10-30T03:09:35.861Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-114531 (GCVE-0-2026-114531)

    Vulnerability from nvd – Published: 2026-10-30 03:09 – Updated: 2026-10-30 03:09
    VLAI
    Title
    Swiper formatter - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-228
    Summary
    Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Swiper formatter allows Stored XSS. This issue affects Swiper formatter versions: from 0.0.0 to 2.1.2, from 3.0.1 to 3.1.0.
    Severity
    No CVSS data available.
    CWE
    • CWE-79 - Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting")
    Assigner
    drupal CNA under the mitre root
    CNA scorecard D 53/100 over 279 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Drupal Swiper formatter Affected: 0.0.0 , < 2.1.2 (semver)
    Affected: 3.0.1 , < 3.1.0 (semver)
    		Create a notification for this product.
    Date Public
    2026-10-21 17:42
    Credits
    Drew Webber (mcdruid) Julian Pustkuchen (anybody) Joshua Sedler (grevil) Drupal Lady (bbu23) Joshua Sedler (grevil) Drew Webber (mcdruid) nk_ Swan Kalata (akalata) Greg Knaddison (greggles) Drew Webber (mcdruid) Juraj Nemec (poker10)
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "collectionURL": "https://www.drupal.org/project/swiper_formatter",
          "product": "Swiper formatter",
          "repo": "https://git.drupalcode.org/project/swiper_formatter",
          "vendor": "Drupal",
          "versions": [
            {
              "lessThan": "2.1.2",
              "status": "affected",
              "version": "0.0.0",
              "versionType": "semver"
            },
            {
              "lessThan": "3.1.0",
              "status": "affected",
              "version": "3.0.1",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Drew Webber (mcdruid)"
        },
        {
          "lang": "en",
          "type": "finder",
          "value": "Julian Pustkuchen (anybody)"
        },
        {
          "lang": "en",
          "type": "finder",
          "value": "Joshua Sedler (grevil)"
        },
        {
          "lang": "en",
          "type": "remediation developer",
          "value": "Drupal Lady (bbu23)"
        },
        {
          "lang": "en",
          "type": "remediation developer",
          "value": "Joshua Sedler (grevil)"
        },
        {
          "lang": "en",
          "type": "remediation developer",
          "value": "Drew Webber (mcdruid)"
        },
        {
          "lang": "en",
          "type": "remediation developer",
          "value": "nk_"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "Swan Kalata (akalata)"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "Greg Knaddison (greggles)"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "Drew Webber (mcdruid)"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "Juraj Nemec (poker10)"
        }
      ],
      "datePublic": "2026-10-21T17:42:01.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Improper Neutralization of Input During Web Page Generation (\"Cross-site Scripting\") vulnerability in Drupal Swiper formatter allows Stored XSS. This issue affects Swiper formatter versions: from 0.0.0 to 2.1.2, from 3.0.1 to 3.1.0."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-592",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-592 Stored XSS"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-79",
              "description": "CWE-79 Improper Neutralization of Input During Web Page Generation (\"Cross-site Scripting\")",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-30T03:09:40.925Z",
        "orgId": "2c85b837-eb8b-40ed-9d74-228c62987387",
        "shortName": "drupal"
      },
      "references": [
        {
          "url": "https://www.drupal.org/sa-contrib-2026-228"
        }
      ],
      "title": "Swiper formatter - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-228"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "2c85b837-eb8b-40ed-9d74-228c62987387",
    "assignerShortName": "drupal",
    "cveId": "CVE-2026-114531",
    "datePublished": "2026-10-30T03:09:40.925Z",
    "dateReserved": "2026-10-21T17:08:25.387Z",
    "dateUpdated": "2026-10-30T03:09:40.925Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-114531 (GCVE-0-2026-114531)

    Vulnerability from cvelistv5 – Published: 2026-10-30 03:09 – Updated: 2026-10-30 03:09
    VLAI
    Title
    Swiper formatter - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-228
    Summary
    Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Swiper formatter allows Stored XSS. This issue affects Swiper formatter versions: from 0.0.0 to 2.1.2, from 3.0.1 to 3.1.0.
    Severity
    No CVSS data available.
    CWE
    • CWE-79 - Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting")
    Assigner
    drupal CNA under the mitre root
    CNA scorecard D 53/100 over 279 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Drupal Swiper formatter Affected: 0.0.0 , < 2.1.2 (semver)
    Affected: 3.0.1 , < 3.1.0 (semver)
    		Create a notification for this product.
    Date Public
    2026-10-21 17:42
    Credits
    Drew Webber (mcdruid) Julian Pustkuchen (anybody) Joshua Sedler (grevil) Drupal Lady (bbu23) Joshua Sedler (grevil) Drew Webber (mcdruid) nk_ Swan Kalata (akalata) Greg Knaddison (greggles) Drew Webber (mcdruid) Juraj Nemec (poker10)
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "collectionURL": "https://www.drupal.org/project/swiper_formatter",
          "product": "Swiper formatter",
          "repo": "https://git.drupalcode.org/project/swiper_formatter",
          "vendor": "Drupal",
          "versions": [
            {
              "lessThan": "2.1.2",
              "status": "affected",
              "version": "0.0.0",
              "versionType": "semver"
            },
            {
              "lessThan": "3.1.0",
              "status": "affected",
              "version": "3.0.1",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Drew Webber (mcdruid)"
        },
        {
          "lang": "en",
          "type": "finder",
          "value": "Julian Pustkuchen (anybody)"
        },
        {
          "lang": "en",
          "type": "finder",
          "value": "Joshua Sedler (grevil)"
        },
        {
          "lang": "en",
          "type": "remediation developer",
          "value": "Drupal Lady (bbu23)"
        },
        {
          "lang": "en",
          "type": "remediation developer",
          "value": "Joshua Sedler (grevil)"
        },
        {
          "lang": "en",
          "type": "remediation developer",
          "value": "Drew Webber (mcdruid)"
        },
        {
          "lang": "en",
          "type": "remediation developer",
          "value": "nk_"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "Swan Kalata (akalata)"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "Greg Knaddison (greggles)"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "Drew Webber (mcdruid)"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "Juraj Nemec (poker10)"
        }
      ],
      "datePublic": "2026-10-21T17:42:01.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Improper Neutralization of Input During Web Page Generation (\"Cross-site Scripting\") vulnerability in Drupal Swiper formatter allows Stored XSS. This issue affects Swiper formatter versions: from 0.0.0 to 2.1.2, from 3.0.1 to 3.1.0."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-592",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-592 Stored XSS"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-79",
              "description": "CWE-79 Improper Neutralization of Input During Web Page Generation (\"Cross-site Scripting\")",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-30T03:09:40.925Z",
        "orgId": "2c85b837-eb8b-40ed-9d74-228c62987387",
        "shortName": "drupal"
      },
      "references": [
        {
          "url": "https://www.drupal.org/sa-contrib-2026-228"
        }
      ],
      "title": "Swiper formatter - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-228"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "2c85b837-eb8b-40ed-9d74-228c62987387",
    "assignerShortName": "drupal",
    "cveId": "CVE-2026-114531",
    "datePublished": "2026-10-30T03:09:40.925Z",
    "dateReserved": "2026-10-21T17:08:25.387Z",
    "dateUpdated": "2026-10-30T03:09:40.925Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-114535 (GCVE-0-2026-114535)

    Vulnerability from cvelistv5 – Published: 2026-10-30 03:09 – Updated: 2026-10-30 03:09
    VLAI
    Title
    Swiper formatter - Moderately critical - Information disclosure - SA-CONTRIB-2026-233
    Summary
    Missing Authorization vulnerability in Drupal Swiper formatter allows Forceful Browsing. This issue affects Swiper formatter versions: from 0.0.0 to 2.1.2, from 3.0.1 to 3.1.0.
    Severity
    No CVSS data available.
    CWE
    Assigner
    drupal CNA under the mitre root
    CNA scorecard D 53/100 over 279 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Drupal Swiper formatter Affected: 0.0.0 , < 2.1.2 (semver)
    Affected: 3.0.1 , < 3.1.0 (semver)
    		Create a notification for this product.
    Date Public
    2026-10-21 17:46
    Credits
    Ryan Solomon (phizes) Julian Pustkuchen (anybody) Joshua Sedler (grevil) Drupal Lady (bbu23) Joshua Sedler (grevil) Swan Kalata (akalata) Greg Knaddison (greggles) Juraj Nemec (poker10)
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "collectionURL": "https://www.drupal.org/project/swiper_formatter",
          "product": "Swiper formatter",
          "repo": "https://git.drupalcode.org/project/swiper_formatter",
          "vendor": "Drupal",
          "versions": [
            {
              "lessThan": "2.1.2",
              "status": "affected",
              "version": "0.0.0",
              "versionType": "semver"
            },
            {
              "lessThan": "3.1.0",
              "status": "affected",
              "version": "3.0.1",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Ryan Solomon (phizes)"
        },
        {
          "lang": "en",
          "type": "finder",
          "value": "Julian Pustkuchen (anybody)"
        },
        {
          "lang": "en",
          "type": "finder",
          "value": "Joshua Sedler (grevil)"
        },
        {
          "lang": "en",
          "type": "remediation developer",
          "value": "Drupal Lady (bbu23)"
        },
        {
          "lang": "en",
          "type": "remediation developer",
          "value": "Joshua Sedler (grevil)"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "Swan Kalata (akalata)"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "Greg Knaddison (greggles)"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "Juraj Nemec (poker10)"
        }
      ],
      "datePublic": "2026-10-21T17:46:29.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Missing Authorization vulnerability in Drupal Swiper formatter allows Forceful Browsing. This issue affects Swiper formatter versions: from 0.0.0 to 2.1.2, from 3.0.1 to 3.1.0."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-87",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-87 Forceful Browsing"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-862",
              "description": "CWE-862 Missing Authorization",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-30T03:09:35.861Z",
        "orgId": "2c85b837-eb8b-40ed-9d74-228c62987387",
        "shortName": "drupal"
      },
      "references": [
        {
          "url": "https://www.drupal.org/sa-contrib-2026-233"
        }
      ],
      "title": "Swiper formatter - Moderately critical - Information disclosure - SA-CONTRIB-2026-233"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "2c85b837-eb8b-40ed-9d74-228c62987387",
    "assignerShortName": "drupal",
    "cveId": "CVE-2026-114535",
    "datePublished": "2026-10-30T03:09:35.861Z",
    "dateReserved": "2026-10-21T17:08:25.388Z",
    "dateUpdated": "2026-10-30T03:09:35.861Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}