Approved changes feed: RSS · Atom
cpe:2.3:a:drupal:colorbox:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Drupal (5a354f1f-83c2-5c0e-b1bc-3ae1f55812de) |
|---|---|
| Product | Colorbox (103938f4-5785-5d99-b3b7-9f1cee41c531) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-58591 |
vulnerable | 2026-07-29 01:03:17.122542 |
Colorbox - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-069
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Colorbox allows Cross-Site Scripting (XSS). This issue affects Colorbox versions: from 0.0.0 to 2.1.5, from 0.0.0 to 2.2.0.
Published: 2026-07-10T21:46:18.632Z
Updated: 2026-07-13T18:16:59.392Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-3900 |
vulnerable | 2026-06-08 07:23:10.112637 |
Colorbox - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-041
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Colorbox allows Cross-Site Scripting (XSS).This issue affects Colorbox: from 0.0.0 before 2.1.3.
Published: 2025-04-23T17:07:37.137Z
Updated: 2025-04-25T02:49:38.915Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.