https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T18:05:21.278577+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/drupal-contrib-2025-069 DRUPAL-CONTRIB-2025-069 2026-10-15T18:05:21.356125+00:00

Affected: Packagist:https://packages.drupal.org/8: drupal/lightgallery

This module integrates Drupal with LightGallery, enabling the use of the LightGallery library with any image field or view.

The module does not adequately sanitize user input in the image field’s "alt" attribute, potentially allowing cross-site scripting (XSS) attacks when tags or scripts are inserted.

This vulnerability is partially mitigated by the requirement that an attacker must have permission to create content containing an image field configured to use the LightGallery format.

 https://cve.radiocsirt.org/vuln/euvd-2026-244022 EUVD-2026-244022 2026-10-15T18:05:21.356202+00:00 EUVD-2026-244022 https://cve.radiocsirt.org/vuln/fkie_cve-2025-48447 fkie_cve-2025-48447 2026-10-15T18:05:21.356226+00:00

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Lightgallery allows Cross-Site Scripting (XSS).This issue affects Lightgallery: from 0.0.0 before 1.6.0.

 https://cve.radiocsirt.org/vuln/ghsa-w5px-5878-m9x4 GHSA-w5px-5878-m9x4 — Drupal Lightgallery Cross-site Scripting vulnerability 2026-10-15T18:05:21.356264+00:00

Affected: Packagist: drupal/lightgallery

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Lightgallery allows Cross-Site Scripting (XSS). This issue affects Lightgallery: from 0.0.0 before 1.6.0.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1119 WID-SEC-W-2025-1119 — Drupal Produkte: Mehrere Schwachstellen 2026-10-15T18:05:21.356299+00:00

Ein Angreifer kann mehrere Schwachstellen in Drupal ausnutzen, um Informationen offenzulegen, Sicherheitsvorkehrungen zu umgehen, Cross-Site-Scripting durchzuführen oder einen Denial of Service auszuführen.