Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Klaro Cookie & Consent Management Project Clear all filters
TI-2025-05122 CVE-2025-5682 · GHSA-2vww-xx9q-5hxm

Klaro Cookie & Consent Management - Moderately critical - Cross-site Scripting - SA-CONTRIB-2025-080

Priority LOW 20

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Klaro Cookie & Consent Management allows Cross-Site Scripting (XSS).This issue affects Klaro Cookie & Consent M…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00266 Published 2025-06-26 Fixed in 3.0.7 CWE-79
TI-2025-30201 CVE-2025-47704 · GHSA-h4mg-vgcw-h6r2

Klaro Cookie & Consent Management - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-050

Priority LOW 27

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Klaro Cookie & Consent Management allows Cross-Site Scripting (XSS).This issue affects Klaro Cookie & Consent M…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00238 Published 2025-05-14 Fixed in 3.0.5 CWE-79