CNNVD-202506-1784 Information

CNNVD ID

CNNVD-202506-1784

CVE-2025-48917

  • CNNVD Published: 2025-06-13

Description (Chinese)

EU Cookie Compliance是Drupal社区的一款网页插件。 EU Cookie Compliance 1.26.0之前版本存在安全漏洞,该漏洞源于输入中和不当,可能导致跨站脚本攻击。

Description (English)

EU Cookie Compliance is a web-page plugin for the Drupal community. There was a security loophole in previous versions of EU Cookie Compliance 1.26.0, which originated in inappropriate input and could result in a cross-site script attack.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

Drupal

Published

2025-06-13

Last Modified

2026-02-24

References

https://www.drupal.org/sa-contrib-2025-072 https://vigilance.fr/vulnerability/Drupal-EU-Cookie-Compliance-Cross-Site-Scripting-dated-29-05-2025-47296

Patch

https://www.drupal.org/project/eu_cookie_compliance/releases

Share on: