CVE Intelligence

Drupal Colorbox vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Drupal Colorbox: 1 record(s), with affected versions and fixes.

CVE-2026-58591 Medium · 5.4 CWE-79 Jul 10, 2026
Colorbox - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-069
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Colorbox allows Cross-Site Scripting (XSS). This issue affects Colorbox versions: from 0.0.0 to 2.1.5, from 0.0.0 to 2.2.0.