View online: https://www.drupal.org/sa-contrib-2026-228 Project: Swiper formatter [1] Project machine name: swiper_formatter Date: 2026-October-21 Security risk: *Moderately critical* 14 ∕ 25 AC:Basic/A:User/CI:Some/II:Some/E:Theoretical/TD:All [2] Vulnerability: Cross-site scripting Affected versions: <2.1.2 || >=3.0.0 <3.1.0 CVE IDs: CVE-2026-114531 Description: The module provides integration with third party JS library SwiperJs. User-entered text is used as part of the slide without appropriate filtering leading to a cross-site scripting (XSS) vulnerability. This vulnerability is mitigated by the fact that an attacker would need a role with permission to edit the caption. Solution: Install the latest version: * If you use the Swiper formatter module 3.x, upgrade to Swiper formatter 3.1.0 [3] * If you use the Swiper formatter module 2.x, upgrade to Swiper formatter 2.1.2 [4] Reported By: * Drew Webber (mcdruid) [5] of the Drupal Security Team * Julian Pustkuchen (anybody) [6] * Joshua Sedler (grevil) [7] Fixed By: * Drupal Lady (bbu23) [8] * Joshua Sedler (grevil) [9] * Drew Webber (mcdruid) [10] of the Drupal Security Team * nk_ [11] Coordinated By: * Swan Kalata (akalata) [12] of the Drupal Security Team * Greg Knaddison (greggles) [13] of the Drupal Security Team * Drew Webber (mcdruid) [14] of the Drupal Security Team * Juraj Nemec (poker10) [15] of the Drupal Security Team ------------------------------------------------------------------------------ Contribution record [16] [1] https://www.drupal.org/project/swiper_formatter [2] https://www.drupal.org/drupal-security-team/security-risk-levels-defined [3] https://www.drupal.org/project/swiper_formatter/releases/3.1.0 [4] https://www.drupal.org/project/swiper_formatter/releases/2.1.2 [5] https://www.drupal.org/u/mcdruid [6] https://www.drupal.org/u/anybody [7] https://www.drupal.org/u/grevil [8] https://www.drupal.org/u/bbu23 [9] https://www.drupal.org/u/grevil [10] https://www.drupal.org/u/mcdruid [11] https://www.drupal.org/u/nk_ [12] https://www.drupal.org/u/akalata [13] https://www.drupal.org/u/greggles [14] https://www.drupal.org/u/mcdruid [15] https://www.drupal.org/u/poker10 [16] https://new.drupal.org/contribution-record?source_link=https%3A//www.drupal....