https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T18:28:10.377302+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/drupal-contrib-2026-117 DRUPAL-CONTRIB-2026-117 2026-10-03T18:28:10.438465+00:00

Affected: Packagist:https://packages.drupal.org/8: drupal/slick

Slick UI, a sub-module of Slick, enables you to add Slick option sets that may contain HTML for carousel buttons.

Previous releases of the module did not sufficiently validate user input, leading to a Cross Site Scripting (XSS) vulnerability.

*Note: This vulnerability was fixed in 8.x-2.1 but that was not marked as a security release at the time.*

 https://cve.radiocsirt.org/vuln/euvd-2026-363222 EUVD-2026-363222 2026-10-03T18:28:10.438522+00:00 EUVD-2026-363222 https://cve.radiocsirt.org/vuln/fkie_cve-2026-81160 fkie_cve-2026-81160 2026-10-03T18:28:10.438539+00:00

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Slick Carousel allows Stored XSS. This issue affects Slick Carousel versions: from 0.0.0 to 2.1.0.

 https://cve.radiocsirt.org/vuln/ghsa-3c44-v2v5-3fvf GHSA-3c44-v2v5-3fvf 2026-10-03T18:28:10.438563+00:00

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Slick Carousel allows Stored XSS. This issue affects Slick Carousel versions: from 0.0.0 to 2.1.0.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3041 WID-SEC-W-2026-3041 — Drupal Extensions: Mehrere Schwachstellen 2026-10-03T18:28:10.438578+00:00

Ein Angreifer kann mehrere Schwachstellen in verschiedenen Drupal Erweiterungen ausnutzen, um Sicherheitsmaßnahmen zu umgehen, sensible Informationen offenzulegen, Daten zu manipulieren und Cross-Site-Scripting-Angriffe durchzuführen.