CVE-2025-48922

A Cross-Site Scripting (XSS) vulnerability exists in the Drupal GLightbox JavaScript image and video displayer due to improper input neutralization . The module fails to sufficiently filter user-supplied text for the GLightbox library, allowing attackers to execute malicious scripts. This issue a...