Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Colorbox allows Cross-Site Scripting (XSS).This issue affects Colorbox: from 0.0.0 before 2.1.3.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://backdropcms.org/security/backdrop-sa-contrib-2025-012 | Third Party Advisory |
| https://www.drupal.org/sa-contrib-2025-041 | Third Party Advisory |
Configurations
History
20 Jun 2025, 16:22
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://www.drupal.org/sa-contrib-2025-041 - Third Party Advisory | |
| References | () https://backdropcms.org/security/backdrop-sa-contrib-2025-012 - Third Party Advisory | |
| First Time |
Colorbox Project colorbox
Colorbox Project |
|
| CPE | cpe:2.3:a:colorbox_project:colorbox:*:-:*:*:*:drupal:*:* |
25 Apr 2025, 03:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
23 Apr 2025, 17:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-04-23 17:16
Updated : 2025-06-20 16:22
NVD link : CVE-2025-3900
Mitre link : CVE-2025-3900
JSON object : View
Products Affected
colorbox_project
- colorbox
CWE
No CWE.