CyberRota Analysis
AI-GeneratedThe Drupal Colorbox module is vulnerable to a Cross-Site Scripting (XSS) attack due to improper input neutralization during web page generation, affecting versions up to 2.2.0. This vulnerability could allow attackers to inject malicious scripts into web pages viewed by users, potentially leading to data theft or session hijacking. Organizations using affected versions of the Colorbox module should prioritize applying updates to mitigate this security risk.
CVE
CVE-2026-58591
Severity
MEDIUM
CVSS
5.4
EPSS
0.14%
Original NVD Description
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Colorbox allows Cross-Site Scripting (XSS). This issue affects Colorbox versions: from 0.0.0 to 2.1.5, from 0.0.0 to 2.2.0.
Related CVEs
Other vulnerabilities affecting the same vendor(s)