CVE-2025-7392

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Cookies Addons allows Cross-Site Scripting (XSS).This issue affects Cookies Addons: from 1.0.0 before 1.2.4.

Reserved 2025-07-09 | Published 2025-07-21 | Updated 2025-07-21 | Assigner drupal

Problem types

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Product status

Default status
unaffected

1.0.0 before 1.2.4
affected

Credits

Pierre Rudloff (prudloff) finder

Guido Schmitz (guido_s) remediation developer

Kostia Bohach (_shy) remediation developer

Greg Knaddison (greggles) coordinator

Pierre Rudloff (prudloff) coordinator

References

www.drupal.org/sa-contrib-2025-087

cve.org (CVE-2025-7392)

nvd.nist.gov (CVE-2025-7392)

Download JSON