https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 13:35:10 +0000 https://cve.radiocsirt.org/vuln/drupal-contrib-2025-049 <p><strong>Affected:</strong> Packagist:https://packages.drupal.org/8: drupal/cookies</p> <p>The COOKIES module protects users from executing JavaScript code provided by third parties, e.g., to display ads or track user data without consent.</p> <p>The cookies\_asset\_injector module (a sub-module of the COOKiES module) also allows inline JavaScript to be included in consent management. However, this does not adequately check whether the provided JavaScript code originates from authorized users.</p> <p>A potential attacker would at least need permission to create and publish HTML (e.g. content or comments).</p> <p><strong>Affected:</strong> Packagist:https://packages.drupal.org/8: drupal/cookies</p> <p>The COOKIES module protects users from executing JavaScript code provided by third parties, e.g., to display ads or track user data without consent.</p> <p>The cookies\_asset\_injector module (a sub-module of the COOKiES module) also allows inline JavaScript to be included in consent management. However, this does not adequately check whether the provided JavaScript code originates from authorized users.</p> <p>A potential attacker would at least need permission to create and publish HTML (e.g. content or comments).</p> https://cve.radiocsirt.org/vuln/drupal-contrib-2025-049 https://cve.radiocsirt.org/vuln/euvd-2026-240276 EUVD-2026-240276 https://cve.radiocsirt.org/vuln/euvd-2026-240276 https://cve.radiocsirt.org/vuln/fkie_cve-2025-47703 <p>Improper Neutralization of Input During Web Page Generation (&#39;Cross-site Scripting&#39;) vulnerability in Drupal COOKiES Consent Management allows Cross-Site Scripting (XSS).This issue affects COOKiES Consent Management: from 0.0.0 before 1.2.14.</p> <p>Improper Neutralization of Input During Web Page Generation (&#39;Cross-site Scripting&#39;) vulnerability in Drupal COOKiES Consent Management allows Cross-Site Scripting (XSS).This issue affects COOKiES Consent Management: from 0.0.0 before 1.2.14.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-47703 https://cve.radiocsirt.org/vuln/ghsa-mghr-rhjw-p9jw <p>Improper Neutralization of Input During Web Page Generation (&#39;Cross-site Scripting&#39;) vulnerability in Drupal COOKiES Consent Management allows Cross-Site Scripting (XSS).This issue affects COOKiES Consent Management: from 0.0.0 before 1.2.14.</p> <p>Improper Neutralization of Input During Web Page Generation (&#39;Cross-site Scripting&#39;) vulnerability in Drupal COOKiES Consent Management allows Cross-Site Scripting (XSS).This issue affects COOKiES Consent Management: from 0.0.0 before 1.2.14.</p> https://cve.radiocsirt.org/vuln/ghsa-mghr-rhjw-p9jw https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0978 <p>Ein Angreifer kann mehrere Schwachstellen in verschiedenen Drupal Erweiterungen ausnutzen, um Dateien zu manipulieren, Cross-Site-Scripting-Angriffe durchzuführen und Sicherheitsmaßnahmen zu umgehen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in verschiedenen Drupal Erweiterungen ausnutzen, um Dateien zu manipulieren, Cross-Site-Scripting-Angriffe durchzuführen und Sicherheitsmaßnahmen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0978