CVE-2026-114531

Name of the Vulnerable Software and Affected Versions Drupal Swiper formatter versions 0.0.0 through 2.1.2 Drupal Swiper formatter versions 3.0.1 through 3.1.0

Description Stored Cross-site Scripting (XSS) occurs because user-entered text is used as part of a slide without appropriate filtering. This issue requires the attacker to possess a role with permissions to edit the caption.

Recommendations Update Drupal Swiper formatter versions 0.0.0 through 2.1.2 to a version newer than 2.1.2. Update Drupal Swiper formatter versions 3.0.1 through 3.1.0 to a version newer than 3.1.0.