Search
Find a vulnerability
Search criteria
ⓘ
Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.
Related vulnerabilities
DRUPAL-CONTRIB-2026-131 (CVE-2026-84919)
Vulnerability from drupal – Published: 2026-09-02 16:37 – Updated: 2026-09-02 16:37 – Source website
VLAI
Details
This module enables you to add dynamic caption support to PhotoSwipe image galleries.
The module doesn't sufficiently sanitize user-supplied input (such as image alt tags) in its dynamic caption script, leading to a Cross-Site Scripting (XSS) vulnerability.
This vulnerability is mitigated by the fact that an attacker must have a role that permits them to enter HTML content.
Credits
References
| URL | Type | |
|---|---|---|
{
"affected": [
{
"database_specific": {
"affected_versions": "\u003c5.0.9"
},
"package": {
"ecosystem": "Packagist:https://packages.drupal.org/8",
"name": "drupal/photoswipe"
},
"ranges": [
{
"database_specific": {
"constraint": "\u003c5.0.9"
},
"events": [
{
"introduced": "0"
},
{
"fixed": "5.0.9"
}
],
"type": "ECOSYSTEM"
}
],
"severity": []
}
],
"aliases": [
"CVE-2026-84919"
],
"credits": [
{
"contact": [
"https://www.drupal.org/u/prudloff"
],
"name": "Pierre Rudloff (prudloff)"
}
],
"details": "This module enables you to add dynamic caption support to PhotoSwipe image galleries.\n\nThe module doesn\u0027t sufficiently sanitize user-supplied input (such as image alt tags) in its dynamic caption script, leading to a Cross-Site Scripting (XSS) vulnerability.\n\nThis vulnerability is mitigated by the fact that an attacker must have a role that permits them to enter HTML content.",
"id": "DRUPAL-CONTRIB-2026-131",
"modified": "2026-09-02T16:37:37.000Z",
"published": "2026-09-02T16:37:37.000Z",
"references": [
{
"type": "WEB",
"url": "https://www.drupal.org/sa-contrib-2026-131"
}
],
"schema_version": "1.7.0"
}