CVE Intelligence

Colorbox Inline Project vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Colorbox Inline Project products: 1 record(s), with severity, exploitation and fixes.

Exploited only (KEV) →

CVE-2026-8493 Medium · 5.4 CWE-79 May 19, 2026
Colorbox Inline - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-036
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Colorbox Inline allows Cross-Site Scripting (XSS). This issue affects Colorbox Inline: from 0.0.0 before 2.1.1.