CVE Intelligence

Colorbox Project vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Colorbox Project products: 1 record(s), with severity, exploitation and fixes.

Colorbox 1

Exploited only (KEV) →

CVE-2026-58591 Medium · 5.4 CWE-79 Jul 10, 2026
Colorbox - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-069
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Colorbox allows Cross-Site Scripting (XSS). This issue affects Colorbox versions: from 0.0.0 to 2.1.5, from 0.0.0 to 2.2.0.