Most recent entries from all

DRUPAL-CONTRIB-2026-117

Affected: Packagist:https://packages.drupal.org/8: drupal/slick

Slick UI, a sub-module of Slick, enables you to add Slick option sets that may contain HTML for carousel buttons.

Previous releases of the module did not sufficiently validate user input, leading to a Cross Site Scripting (XSS) vulnerability.

*Note: This vulnerability was fixed in 8.x-2.1 but that was not marked as a security release at the time.*

fkie_cve-2026-81160

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Slick Carousel allows Stored XSS. This issue affects Slick Carousel versions: from 0.0.0 to 2.1.0.

Most recent entries from all

DRUPAL-CONTRIB-2026-117

fkie_cve-2026-81160

GHSA-3c44-v2v5-3fvf