CVE-2026-84919: PhotoSwipe - Responsive JavaScript Modal Image Gallery - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-131

Q: Which installations are affected?

Drupal installations using PhotoSwipe - Responsive JavaScript Modal Image Gallery versions from 0.0.0 through 5.0.9 are affected.

Q: What type of attack does this enable?

The issue allows stored cross-site scripting, where attacker-controlled input can be stored and later executed in users' web browsers when rendered in a page.

Published Oct 22, 2026

Updated

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal PhotoSwipe - Responsive JavaScript Modal Image Gallery allows Stored XSS. This issue affects PhotoSwipe - Responsive JavaScript Modal Image Gallery versions: from 0.0.0 to 5.0.9.

Affected Software

1 affected component

Drupal PhotoSwipe - Responsive JavaScript Modal Image Gallery>=0.0.0<=5.0.9

Event History

Oct 22, 2026

CVE Published

via MITRE·01:22 AM

Data Sourced

via MITRE·01:22 AM

DescriptionWeakness

Frequently Asked Questions

Which installations are affected?

Drupal installations using PhotoSwipe - Responsive JavaScript Modal Image Gallery versions from 0.0.0 through 5.0.9 are affected.

What type of attack does this enable?

The issue allows stored cross-site scripting, where attacker-controlled input can be stored and later executed in users' web browsers when rendered in a page.

CVE-2026-84919: PhotoSwipe - Responsive JavaScript Modal Image Gallery - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-131

Affected Software

Event History

Frequently Asked Questions

Which installations are affected?

What type of attack does this enable?

Company

Resources

Contact

Frequently Asked Questions

Which installations are affected?

What type of attack does this enable?