DRUPAL-CONTRIB-2023-021
DRUPAL-CONTRIB-2023-021
This page contains facts from public vulnerability sources. Check the original advisory before updating.
CivicCookieControl is a module that can help make a website compliant with EU and UK cookie legislation. The Civic GovUK Cookie Control module does not sufficiently sanitize the configuration resulting in a Cross-Site Scripting (XSS) vulnerability. This vulnerability is mitigated by the fact that the attacker must have a role with the "Administer Civic Cookie Control" permission.
Fix available
- Published
- Updated
Stack: php
Affected products and versions
drupal/civicccookiecontrol Packagist:https://packages.drupal.org/8
- Affected ranges
- ECOSYSTEM: < 4.4.13
Update to 4.4.13