Colorbox Project Colorbox vulnerabilities

3 vulnerabilities

Known vulnerabilities in Colorbox Project Colorbox, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

3.5CVE-2015-7881colorbox_projectcolorbox
EPSS score
0.87%
The Colorbox module 7.x-2.x before 7.x-2.10 for Drupal allows remote authenticated users with certain permissions to bypass intended access restrictions and "add unexpected content to a Colorbox" via unspecified vectors, possibly related to a link in a comment.6.1CVE-2025-3900colorbox_projectcolorbox+1
EPSS score
0.25%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Colorbox allows Cross-Site Scripting (XSS).This issue affects Colorbox: from 0.0.0 before 2.1.3.5.4CVE-2026-58591colorbox_projectcolorbox+1
EPSS score
0.23%
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Colorbox allows Cross-Site Scripting (XSS). This issue affects Colorbox versions: from 0.0.0 to 2.1.5, from 0.0.0 to 2.2.0.