Photoswipe - Responsive Javascript Modal Image Gallery CVEs and Security Vulnerabilities

CVE-2026-84919

PhotoSwipe - Responsive JavaScript Modal Image Gallery - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-131

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal PhotoSwipe - Responsive JavaScript Modal Image Gallery allows Stored XSS. This issue affects PhotoSwipe - Responsive JavaScript Modal Image Gallery versions: from 0.0.0 to 5.0.9.

CVSS 3.1 · 4.6 Medium EPSS < 1% KEV · Not listed

Vendors

Drupal

Products

Photoswipe - Responsive Javascript Modal Image Gallery

CVE-2026-16645

PhotoSwipe - Responsive JavaScript Modal Image Gallery - Moderately critical - Access bypass - SA-CONTRIB-2026-088

Missing Authorization vulnerability in Drupal PhotoSwipe - Responsive JavaScript Modal Image Gallery allows Forceful Browsing. This issue affects PhotoSwipe - Responsive JavaScript Modal Image Gallery versions: from 0.0.0 to 3.2.0.

CVSS 3.1 · 9.1 Critical EPSS < 1% KEV · Not listed