DRUPAL-CONTRIB-2026-181

See a problem?
Import Source
https://github.com/DrupalSecurityTeam/drupal-advisory-database/blob/main/advisories/cookiecuttr/DRUPAL-CONTRIB-2026-181.json
JSON Data
https://api.osv.dev/v1/vulns/DRUPAL-CONTRIB-2026-181
Aliases
  • CVE-2026-96379
Published
2026-09-23T17:08:11Z
Modified
2026-09-23T19:15:03Z
Summary
[none]
Details

This module enables you to provide information and options about cookie usage.

The module does not sufficiently filter input submitted through the Cookiecuttr administration form. This could allow specially crafted values to be stored and later rendered without adequate sanitization, resulting in a cross-site scripting (XSS) vulnerability.

This vulnerability is mitigated by the fact that an attacker must have a role with the permission administer cookiecuttr.

References
Credits

Affected packages

Packagist:https://packages.drupal.org/8 / drupal/cookiecuttr

Package

Name
drupal/cookiecuttr
Purl
pkg:composer/drupal/cookiecuttr?repository_url=https:%2F%2Fpackages.drupal.org%2F8

Affected ranges

Type
ECOSYSTEM
Events
Introduced
2.0.0
Fixed
2.0.3
Database specific
Show details 
{
    "constraint":  ">=2.0.0 <2.0.3"
}

Database specific

affected_versions 
">=2.0.0 <2.0.3"
source 
"https://github.com/DrupalSecurityTeam/drupal-advisory-database/blob/main/advisories/cookiecuttr/DRUPAL-CONTRIB-2026-181.json"