CNNVD-202506-3303 Information

CNNVD ID

CNNVD-202506-3303

CVE-2025-48922

  • CNNVD Published: 2025-06-26

Description (Chinese)

Drupal GLightbox是Drupal社区的一个JavaScript的图片、视频展示器。 Drupal GLightbox 1.0.16之前版本存在安全漏洞,该漏洞源于输入中和不当,可能导致跨站脚本攻击。

Description (English)

Drupal GLightbox is a picture, video display of JavaScript in the Drupal community. There was a security loophole in the pre-Drupal GLightbox 1.0.16 version, which originated in inappropriate input and could lead to a cross-site script attack.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

Drupal

Published

2025-06-26

Last Modified

2026-02-24

References

https://www.drupal.org/sa-contrib-2025-078

Patch

https://www.drupal.org/sa-contrib-2025-078

Share on: