Medium severity5.4NVD Advisory· Published May 19, 2026· Updated May 27, 2026
CVE-2026-8493
CVE-2026-8493
Description
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Colorbox Inline allows Cross-Site Scripting (XSS).
This issue affects Colorbox Inline: from 0.0.0 before 2.1.1.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3<2.1.1+ 1 more
- (no CPE)range: <2.1.1
- (no CPE)range: <2.1.1
- cpe:2.3:a:colorbox_inline_project:colorbox_inline:*:*:*:*:*:drupal:*:*Range: <2.1.1
Patches
Vulnerability mechanics
References
1- www.drupal.org/sa-contrib-2026-036nvdThird Party Advisory
News mentions
0No linked articles in our index yet.