DRUPAL-CONTRIB-2023-021
DRUPAL-CONTRIB-2023-021
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
CivicCookieControl is a module that can help make a website compliant with EU and UK cookie legislation. The Civic GovUK Cookie Control module does not sufficiently sanitize the configuration resulting in a Cross-Site Scripting (XSS) vulnerability. This vulnerability is mitigated by the fact that the attacker must have a role with the "Administer Civic Cookie Control" permission.
Correctif disponible
- Publication
- Mise à jour
Pile logicielle: php
Produits et versions concernés
drupal/civicccookiecontrol Packagist:https://packages.drupal.org/8
- Plages de versions concernées
- ECOSYSTEM: < 4.4.13
Mettez à jour vers 4.4.13