CVE-2025-8092

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2025-8092

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-8092.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2025-8092

Aliases

DRUPAL-CONTRIB-2025-092

Published

2025-08-15T16:26:27.480Z

Modified

2026-07-15T01:49:07.865905247Z

Severity

7.6 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L CVSS Calculator

Summary

COOKiES Consent Management - Moderately critical - Cross-site Scripting - SA-CONTRIB-2025-092

Details

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal COOKiES Consent Management allows Cross-Site Scripting (XSS).This issue affects COOKiES Consent Management: from 0.0.0 before 1.2.16.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/8xxx/CVE-2025-8092.json",
    "cna_assigner": "drupal",
    "cwe_ids": [
        "CWE-79"
    ]
}

References

Affected packages

Git / git.drupalcode.org/project/cookies

Affected ranges

Type

GIT

Repo

https://git.drupalcode.org/project/cookies

Events

Introduced

Fixed

4b36be22444a0bb988baf499b728a235bafbc067

Database specific

{
    "source": "AFFECTED_FIELD",
    "extracted_events": [
        {
            "introduced": "0.0.0"
        },
        {
            "fixed": "1.2.16"
        }
    ]
}

Affected versions

1.*

1.0.0

1.0.0-rc1

1.0.0-rc10

1.0.0-rc2

1.0.0-rc3

1.0.0-rc4

1.0.0-rc5

1.0.0-rc6

1.0.0-rc7

1.0.0-rc8

1.0.0-rc9

1.0.1

1.0.10

1.0.11

1.0.14

1.0.15

1.0.16

1.0.17

1.0.18

1.0.2

1.0.3

1.0.6

1.0.7

1.0.8

1.0.9

1.1.0

1.1.1

1.1.2

1.1.3

1.2.0

1.2.1

1.2.10

1.2.11

1.2.12

1.2.13

1.2.14

1.2.15

1.2.2

1.2.3

1.2.4

1.2.5

1.2.6

1.2.7

1.2.8

1.2.9

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-8092.json"