CVE-2026-114531

5th percentile - higher than 5% of all known CVEs

The Swiper formatter module for Drupal contains a Stored XSS vulnerability caused by improper neutralization of input during web page generation. The issue affects versions from 0.0.0 to 2.1.2 and from 3.0.1 to 3.1.0.

An attacker can store a malicious script that executes in other users' browsers, potentially leading to session theft or account takeover. The risk applies to organizations using this module.

Update the Swiper formatter module to a version later than 2.1.2 or 3.1.0, depending on the branch in use. Until then, restrict content creation to trusted users.