https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 23 Oct 2026 13:14:16 +0000 https://db.gcve.eu/vuln/drupal-contrib-2026-181 <p><strong>Affected:</strong> Packagist:https://packages.drupal.org/8: drupal/cookiecuttr</p> <p>This module enables you to provide information and options about cookie usage.</p> <p>The module does not sufficiently filter input submitted through the Cookiecuttr administration form. This could allow specially crafted values to be stored and later rendered without adequate sanitization, resulting in a cross-site scripting (XSS) vulnerability.</p> <p>This vulnerability is mitigated by the fact that an attacker must have a role with the permission *administer cookiecuttr*.</p> <p><strong>Affected:</strong> Packagist:https://packages.drupal.org/8: drupal/cookiecuttr</p> <p>This module enables you to provide information and options about cookie usage.</p> <p>The module does not sufficiently filter input submitted through the Cookiecuttr administration form. This could allow specially crafted values to be stored and later rendered without adequate sanitization, resulting in a cross-site scripting (XSS) vulnerability.</p> <p>This vulnerability is mitigated by the fact that an attacker must have a role with the permission *administer cookiecuttr*.</p> https://db.gcve.eu/vuln/drupal-contrib-2026-181 https://db.gcve.eu/vuln/fkie_cve-2026-96379 <p>Improper Neutralization of Input During Web Page Generation (&#34;Cross-site Scripting&#34;) vulnerability in Drupal CookieCuttr allows Stored XSS. This issue affects CookieCuttr versions: from 2.0.0 to 2.0.3.</p> <p>Improper Neutralization of Input During Web Page Generation (&#34;Cross-site Scripting&#34;) vulnerability in Drupal CookieCuttr allows Stored XSS. This issue affects CookieCuttr versions: from 2.0.0 to 2.0.3.</p> https://db.gcve.eu/vuln/fkie_cve-2026-96379 https://db.gcve.eu/vuln/ghsa-8xhw-mjf4-6gwc <p>Improper Neutralization of Input During Web Page Generation (&#34;Cross-site Scripting&#34;) vulnerability in Drupal CookieCuttr allows Stored XSS. This issue affects CookieCuttr versions: from 2.0.0 to 2.0.3.</p> <p>Improper Neutralization of Input During Web Page Generation (&#34;Cross-site Scripting&#34;) vulnerability in Drupal CookieCuttr allows Stored XSS. This issue affects CookieCuttr versions: from 2.0.0 to 2.0.3.</p> https://db.gcve.eu/vuln/ghsa-8xhw-mjf4-6gwc https://db.gcve.eu/vuln/wid-sec-w-2026-3554 <p>Ein Angreifer kann mehrere Schwachstellen in Drupal ausnutzen, um beliebigen Programmcode auszuführen, erweiterte Berechtigungen zu erlangen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren und offenzulegen oder Cross-Site-Scripting-Angriffe durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Drupal ausnutzen, um beliebigen Programmcode auszuführen, erweiterte Berechtigungen zu erlangen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren und offenzulegen oder Cross-Site-Scripting-Angriffe durchzuführen.</p> https://db.gcve.eu/vuln/wid-sec-w-2026-3554