—
DRUPAL-CONTRIB-2023-029
Details
This module enables sites to comply with the European cookie law using tarteaucitron.js.
The module doesn't sufficiently filter user-supplied text leading to a Cross Site Scripting (XSS) vulnerability.
This vulnerability is mitigated by the fact that an attacker needs additional permissions. The vulnerability can be exploited by an attacker with a role with the permission "administer tacjs" regardless of other configurations.
Are you affected?
Enter the version of the package you're using.
Affected packages
Packagist:https://packages.drupal.org/8/drupal/tacjs
Introduced in:
0Fixed in: 6.4.0Upgrade drupal/tacjs to 6.4.0 or newer (ecosystem packagist:https://packages.drupal.org/8).