DRUPAL-CONTRIB-2023-029
DRUPAL-CONTRIB-2023-029
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
This module enables sites to comply with the European cookie law using tarteaucitron.js. The module doesn't sufficiently filter user-supplied text leading to a Cross Site Scripting (XSS) vulnerability. This vulnerability is mitigated by the fact that an attacker needs additional permissions. The vulnerability can be exploited by an attacker with a role with the permission "administer tacjs" regardless of other configurations.
Correctif disponible
- Publication
- Mise à jour
Pile logicielle: php
Produits et versions concernés
drupal/tacjs Packagist:https://packages.drupal.org/8
- Plages de versions concernées
- ECOSYSTEM: < 6.4.0
Mettez à jour vers 6.4.0