https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T12:09:24.360687+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/drupal-contrib-2025-078 DRUPAL-CONTRIB-2025-078 2026-10-04T12:09:24.365086+00:00

Affected: Packagist:https://packages.drupal.org/8: drupal/glightbox

GLightbox module is a pure Javascript lightbox for CKEditor.

The module doesn't sufficiently filter user-supplied text for the GLightbox Javascript library leading to a Cross Site Scripting (XSS) vulnerability.

This vulnerability is mitigated by the fact that an attacker must have a role with the permissions to edit content that is configured to support the Glightbox module.

 https://cve.radiocsirt.org/vuln/euvd-2026-245966 EUVD-2026-245966 2026-10-04T12:09:24.365143+00:00 EUVD-2026-245966 https://cve.radiocsirt.org/vuln/fkie_cve-2025-48922 fkie_cve-2025-48922 2026-10-04T12:09:24.365159+00:00

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal GLightbox allows Cross-Site Scripting (XSS).This issue affects GLightbox: from 0.0.0 before 1.0.16.

 https://cve.radiocsirt.org/vuln/ghsa-m92p-p52q-84m4 GHSA-m92p-p52q-84m4 2026-10-04T12:09:24.365182+00:00

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal GLightbox allows Cross-Site Scripting (XSS).This issue affects GLightbox: from 0.0.0 before 1.0.16.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1404 WID-SEC-W-2025-1404 — Drupal Module: Mehrere Schwachstellen 2026-10-04T12:09:24.365198+00:00

Ein Angreifer kann mehrere Schwachstellen in Drupal ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, und um Sicherheitsvorkehrungen zu umgehen.