← Back to CVE search

CVE-2026-8493

Colorbox Inline

Description

Improper Neutralization of Input During Web Page Generation (-Cross-site Scripting-) vulnerability in Drupal Colorbox Inline allows Cross-Site Scripting (XSS). This issue affects Colorbox Inline: from 0.0.0 before 2.1.1.

CVSS 5.4EPSS 0.17700000000000002%Risk 0.55
View source
Published
2026-05-19 23:16:58
Affected versions
<2.1.1
Type
Package
Last modified
2026-07-23 20:10:00
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N