Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal EU Cookie Compliance (GDPR Compliance) allows Cross-Site Scripting (XSS).This issue affects EU Cookie Complianc…
CVSS 3.1MEDIUM 5.0·Network·Low privileges·No interaction·EPSS 0.00224·Published 2025-06-13·Fixed in 1.26.0CWE-79
Cross-site scripting (XSS) vulnerability in the EU Cookie Compliance module 7.x-1.x before 7.x-1.12 for Drupal allows remote authenticated administrators with the "Administer EU Cookie Compliance popup" permission to inj…