—
DRUPAL-CONTRIB-2025-027
Details
This module enables sites to comply with the European cookie law using tarteaucitron.js.
The module doesn't sufficiently filter user-supplied markup inside of content leading to a persistent Cross Site Scripting (XSS) vulnerability.
This vulnerability is mitigated by the fact that an attacker needs to be able to insert specific data attributes in the page.
Are you affected?
Enter the version of the package you're using.
Affected packages
Packagist:https://packages.drupal.org/8/drupal/tacjs
Introduced in:
0Fixed in: 6.7.0Upgrade drupal/tacjs to 6.7.0 or newer (ecosystem packagist:https://packages.drupal.org/8).