Skip to content
OpenAdvisories
Medium · 5.0 CVE-2025-48917 DRUPAL-CONTRIB-2025-072EUVD-2025-18294GHSA-8pgm-2gj7-4gwj

EU Cookie Compliance (GDPR Compliance) - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-072

Published Jun 13, 2025 · Updated Jun 13, 2025 · Assigned by drupal

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal EU Cookie Compliance (GDPR Compliance) allows Cross-Site Scripting (XSS).This issue affects EU Cookie Compliance (GDPR Compliance): from 0.0.0 before 1.26.0.

Affected products

VendorProductAffectedFixed
Drupal EU Cookie Compliance (GDPR Compliance) 0.0.0 – < 1.26.0 1.26.0

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/eu_cookie_compliance < 1.26.0 1.26.0 DRUPAL-CONTRIB-2025-072

Advisories 1

References