PT-2023-37010 · Packagist · Drupal/Civicccookiecontrol
Published
2023-06-21
·
Updated
2023-06-21
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
CivicCookieControl is a module that can help make a website compliant with EU and UK cookie legislation.
The Civic GovUK Cookie Control module does not sufficiently sanitize the configuration resulting in a Cross-Site Scripting (XSS) vulnerability.
This vulnerability is mitigated by the fact that the attacker must have a role with the "Administer Civic Cookie Control" permission.
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Drupal/Civicccookiecontrol