exploitDog

GHSA-h4mg-vgcw-h6r2

Опубликовано: 14 мая 2025

Источник: github

Github: Не прошло ревью

CVSS3: 6.1

Описание

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Klaro Cookie & Consent Management allows Cross-Site Scripting (XSS).This issue affects Klaro Cookie & Consent Management: from 0.0.0 before 3.0.5.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Klaro Cookie & Consent Management allows Cross-Site Scripting (XSS).This issue affects Klaro Cookie & Consent Management: from 0.0.0 before 3.0.5.

Ссылки

EPSS

Процентиль: 14%

0.00046

Низкий

6.1 Medium

CVSS3

CVE ID

Дефекты

CWE-79

Связанные уязвимости

CVE-2025-47704

CVSS3: 6.1

nvd

9 месяцев назад

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Klaro Cookie & Consent Management allows Cross-Site Scripting (XSS).This issue affects Klaro Cookie & Consent Management: from 0.0.0 before 3.0.5.

EPSS

Процентиль: 14%

0.00046

Низкий

6.1 Medium

CVSS3

CVE ID

Дефекты

CWE-79