Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Drupal COOKiES Consent Management 1.2.15 Clear all filters
TI-2025-31055 CVE-2025-48915 · GHSA-7mg7-xh2x-37fm

COOKiES Consent Management - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-076

Priority MEDIUM 43

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal COOKiES Consent Management allows Cross-Site Scripting (XSS).This issue affects COOKiES Consent Management: fro…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00326 Published 2025-06-13 Fixed in 1.2.15 CWE-79
TI-2025-31054 CVE-2025-48914 · GHSA-vrqj-vmcj-7cxx

COOKiES Consent Management - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-075

Priority MEDIUM 43

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal COOKiES Consent Management allows Cross-Site Scripting (XSS).This issue affects COOKiES Consent Management: fro…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00326 Published 2025-06-13 Fixed in 1.2.15 CWE-79