Vulnerabilities / CVE-2026-96382

CVE-2026-96382

Published 2026-10-22 · Awaiting Analysis

CVE-2026-96382

Diba carousel slider - Moderately critical - Cross Site Scripting (XSS) - SA-CONTRIB-2026-191

4.6 MEDIUM
CVSS 3.1 · CNA

0.2%
chance of exploitation in the next 30 days (EPSS; higher than 6% of CVEs)

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Diba carousel slider allows Stored XSS. This issue affects Diba carousel slider versions: from 0.0.0 to 3.0.2.

Scores

4.6CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:NCNA

Affected products

Drupal Diba carousel slider: 0.0.0 to < 3.0.2

Weakness: CWE-79

Also known as: DRUPAL-CONTRIB-2026-191

1 references (advisories, patches, write-ups)

https://www.drupal.org/sa-contrib-2026-191

Sources: NVD, CVE.org, OSV.dev, FIRST EPSS. Missing ones did not answer or have no record yet.

Look up another CVE Check your dependencies Scan a website