—
DRUPAL-CONTRIB-2023-021
Details
CivicCookieControl is a module that can help make a website compliant with EU and UK cookie legislation.
The Civic GovUK Cookie Control module does not sufficiently sanitize the configuration resulting in a Cross-Site Scripting (XSS) vulnerability.
This vulnerability is mitigated by the fact that the attacker must have a role with the "Administer Civic Cookie Control" permission.
Are you affected?
Enter the version of the package you're using.
Affected packages
Packagist:https://packages.drupal.org/8/drupal/civicccookiecontrol
Introduced in:
0Fixed in: 4.4.13Upgrade drupal/civicccookiecontrol to 4.4.13 or newer (ecosystem packagist:https://packages.drupal.org/8).