🔐 CVE Alert

CVE-2026-96382

UNKNOWN 0.0

Diba carousel slider - Moderately critical - Cross Site Scripting (XSS) - SA-CONTRIB-2026-191

CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Diba carousel slider allows Stored XSS. This issue affects Diba carousel slider versions: from 0.0.0 to 3.0.2.

CWE CWE-79
Vendor drupal
Product diba carousel slider
Ecosystems
Industries
WebMedia
Published Oct 22, 2026
Stay Ahead of the Next One

Get instant alerts for drupal diba carousel slider

Be the first to know when new unknown vulnerabilities affecting drupal diba carousel slider are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Drupal / Diba carousel slider
0.0.0 < 3.0.2

References

NVD ↗ CVE.org ↗ EPSS Data ↗
drupal.org: https://www.drupal.org/sa-contrib-2026-191

Credits

Kalle Kipinä (kekkis) Oriol Roselló Castells (oriol_e9g) Swan Kalata (akalata) Bram Driesen (bramdriesen) Greg Knaddison (greggles) Juraj Nemec (poker10) Jess (xjm)