Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Cookies Addons allows Cross-Site Scripting (XSS).This issue affects Cookies Addons: from 1.0.0 before 1.2.4.
CVSS 3.1MEDIUM 6.1·Network·No auth·User interaction·EPSS 0.00266·Published 2025-07-21·Fixed in 1.2.4CWE-79