Server side cross-site scripting In drupal/civicccookiecontrol
Description
CivicCookieControl is a module that can help make a website compliant with EU and UK cookie legislation.
The Civic GovUK Cookie Control module does not sufficiently sanitize the configuration resulting in a Cross-Site Scripting (XSS) vulnerability.
This vulnerability is mitigated by the fact that the attacker must have a role with the "Administer Civic Cookie Control" permission.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 packagist | 4.4.13 |
Aliases
1. 2. 3.