Cross-Site Scripting Vulnerability in Drupal PhotoSwipe - Responsive JavaScript Modal Image Gallery
CVE-2026-84919

Currently unrated

Key Information:

Vendor

Drupal
Status
Photoswipe - Responsive Javascript Modal Image Gallery
Vendor
CVE Published:
22 October 2026

What is CVE-2026-84919?

A cross-site scripting (XSS) vulnerability in the PhotoSwipe - Responsive JavaScript Modal Image Gallery for Drupal enables an attacker to inject malicious scripts into web pages. This can lead to unauthorized access to sensitive user information or manipulation of user interactions. The vulnerability affects versions from 0.0.0 to 5.0.9, highlighting the need for users to update to the latest secure versions and implement appropriate security measures.

Affected Version(s)

PhotoSwipe - Responsive JavaScript Modal Image Gallery 0.0.0 < 5.0.9

References

https://www.drupal.org/sa-contrib-2026-131

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Pierre Rudloff (prudloff)
Bram Driesen (bramdriesen)
Joshua Sedler (grevil)
Pierre Rudloff (prudloff)
Greg Knaddison (greggles)
Pierre Rudloff (prudloff)
.