Cross-site Scripting Vulnerability in Drupal Swiper Formatter
CVE-2026-114531

Currently unrated

Key Information:

Vendor

Drupal
Status
Swiper Formatter
Vendor
CVE Published:
30 October 2026

What is CVE-2026-114531?

The Cross-site Scripting vulnerability in the Drupal Swiper formatter arises from improper handling of input during web page generation. This flaw allows attackers to inject malicious scripts that can be executed in the browsers of users viewing affected pages, resulting in potential data theft or unauthorized actions. The issue specifically impacts Swiper formatter versions ranging from 0.0.0 to 2.1.2, and from 3.0.1 to 3.1.0, emphasizing the need for immediate remediation to safeguard user information and maintain web security.

Affected Version(s)

Swiper formatter 0.0.0 < 2.1.2

Swiper formatter 3.0.1 < 3.1.0

References

https://www.drupal.org/sa-contrib-2026-228

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Drew Webber (mcdruid)
Julian Pustkuchen (anybody)
Joshua Sedler (grevil)
Drupal Lady (bbu23)
Joshua Sedler (grevil)
Drew Webber (mcdruid)
nk_
Swan Kalata (akalata)
Greg Knaddison (greggles)
Drew Webber (mcdruid)
Juraj Nemec (poker10)
.