Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Colorbox Project Clear all filters
TI-2025-03446 CVE-2025-3900 · GHSA-fvp7-w3vq-22p7

Colorbox - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-041

Priority LOW 27

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Colorbox allows Cross-Site Scripting (XSS).This issue affects Colorbox: from 0.0.0 before 2.1.3.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00259 Published 2025-04-23 Fixed in 2.1.3 CWE-79
TI-2015-06551 CVE-2015-7881 · GHSA-f4q5-fj59-3rc4

The Colorbox module 7.x-2.x before 7.x-2.10 for Drupal allows remote authenticated users…

Priority LOW 18

The Colorbox module 7.x-2.x before 7.x-2.10 for Drupal allows remote authenticated users with certain permissions to bypass intended access restrictions and "add unexpected content to a Colorbox" via unspecified vectors,…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.00866 Published 2015-10-26 No fix listed CWE-284