Colorbox Project: >> Colorbox >> 2.0.0 Security Vulnerabilities
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Colorbox allows Cross-Site Scripting (XSS). This issue affects Colorbox versions: from 0.0.0 to 2.1.5, from 0.0.0 to 2.2.0.
CVSS Score
5.4
EPSS Score
0.001
Published
2026-07-10
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Colorbox allows Cross-Site Scripting (XSS).This issue affects Colorbox: from 0.0.0 before 2.1.3.
CVSS Score
6.1
EPSS Score
0.002
Published
2025-04-23