Threats tagged 'drupal-contrib-2026-299'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	–	CVE-2026-122068Highlight js · This module enables you to add syntax-highlighted code snippets to content using High2026-11-04GCVE DatabaseCVE-2026-122068 The Drupal module 'highlight_js' allows adding syntax-highlighted code snippets using CKEditor 5. Versions prior to 1.3.1 do not properly validate input to the CKEditor 5 preview endpoint, resulting in a reflected cross-site scripting (XSS) vulnerability. This flaw was fixed in version 1.3.1. Vulnerability #drupal-contrib-2026-299 #packagist-https-packages-drupa	GCVE Database	2026-11-04

Page 1 of 1