CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2025-3900

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Colorbox allows Cross-Site Scripting (XSS).This issue affects Colorbox: from 0.0.0 before 2.1.3.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.0

EPSS Ranking 11.0%

CVSS Severity

CVSS v3 Score 6.1

References

https://www.drupal.org/sa-contrib-2025-041
https://backdropcms.org/security/backdrop-sa-contrib-2025-012

Products affected by CVE-2025-3900

Colorbox Project » Colorbox » Version: 2.0.0

cpe:2.3:a:colorbox_project:colorbox:2.0.0
Colorbox Project » Colorbox » Version: 2.0.1

cpe:2.3:a:colorbox_project:colorbox:2.0.1
Colorbox Project » Colorbox » Version: 2.0.2

cpe:2.3:a:colorbox_project:colorbox:2.0.2
Colorbox Project » Colorbox » Version: 2.1.0

cpe:2.3:a:colorbox_project:colorbox:2.1.0
Colorbox Project » Colorbox » Version: 2.1.1

cpe:2.3:a:colorbox_project:colorbox:2.1.1
Colorbox Project » Colorbox » Version: 2.1.2

cpe:2.3:a:colorbox_project:colorbox:2.1.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-3900

Products

Pricing

Contact Us