Colorbox (Drupal) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-07-10. Vendor: Drupal.

CVEs of Colorbox

• CVE-2026-58591 - CVSS 5.4 (medium), 2026-07-10: Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Colorbox allows Cross-Site Scripting (XSS). This…
• CVE-2025-3900 - CVSS 6.1 (medium), 2025-04-23: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Colorbox allows Cross-Site Scripting (XSS).This…