Colorbox Project

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Colorbox Project records in CISA KEV

No Colorbox Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Colorbox 3 records LOW

Records

3 records

TI-2025-03446 CVE-2025-3900 · GHSA-fvp7-w3vq-22p7

Colorbox - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-041

LOW 27

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Colorbox allows Cross-Site Scripting (XSS).This issue affects Colorbox: from 0.0.0 before 2.1.3.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00259 Published 2025-04-23 Fixed in 2.1.3 CWE-79

TI-2026-42171 CVE-2026-58591 · GHSA-xj92-p35c-g452

Colorbox - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-069

LOW 24

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Colorbox allows Cross-Site Scripting (XSS).

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00228 Published 2026-07-10 Fixed in 2.1.5, 2.2.0 CWE-79

TI-2015-06551 CVE-2015-7881 · GHSA-f4q5-fj59-3rc4

The Colorbox module 7.x-2.x before 7.x-2.10 for Drupal allows remote authenticated users…

LOW 18

The Colorbox module 7.x-2.x before 7.x-2.10 for Drupal allows remote authenticated users with certain permissions to bypass intended access restrictions and "add unexpected content to a Colorbox" via unspecified vectors,…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.00866 Published 2015-10-26 No fix listed CWE-284

Open these records in search →

Critical	0
High	0
Medium	2
Low	1
No CVSS	0