CVE-2015-7881: Colorbox Project Colorbox

Low severity, CVSS 3.5. EPSS: 0.9% chance of exploitation in the next 30 days.

The Colorbox module 7.x-2.x before 7.x-2.10 for Drupal allows remote authenticated users with certain permissions to bypass intended access restrictions and "add unexpected content to a Colorbox" via unspecified vectors, possibly related to a link in a comment.

Affected products

• Colorbox Project Colorbox: version 7.x-2.0 only; version 7.x-2.1 only; version 7.x-2.2 only; version 7.x-2.3 only; version 7.x-2.4 only; version 7.x-2.5 only; …

Published 2015-10-26. Last modified 2026-06-17.