CVE-2025-48914

High CVSS: 8.6

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal COOKiES Consent Management allows Cross-Site Scripting (XSS).This issue affects COOKiES Consent Management: from 0.0.0 before 1.2.15.

Vendor

Drupal

Product

Cookies Consent Management

CWE

CWE-79

Yayın Tarihi

2025-06-13 16:15:26

Güncelleme

2025-06-18 15:57:07

Source Identifier

mlhess@drupal.org

KEV Date Added

Kategoriler

CWE-79 Cookies Consent Management HIGH Drupal 2025

Referanslar

https://www.drupal.org/sa-contrib-2025-075

Benzer Kayıtlar

Medium

CVE-2025-13082

User Interface (UI) Misrepresentation of Critical Information vulnerability in Drupal Drupal core allows Content Spoofin…

Low

CVE-2025-13083

Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Drupal core allows Exploiting Incorrec…

Medium

CVE-2025-13080

Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal Drupal core allows Forceful Browsing.This i…

Medium

CVE-2025-13081

Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Drupal core allow…

High

CVE-2025-48915

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal COOKiES Con…

Medium

CVE-2025-3474

Missing Authentication for Critical Function vulnerability in Drupal Panels allows Exploiting Incorrectly Configured Acc…