Klaro Cookie Consent Management

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2025-5682 Jun 26, 14:15 PHP MEDIUM PATCH This Month

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Klaro Cookie & Consent Management allows Cross-Site Scripting (XSS).This issue affects Klaro Cookie & Consent Management: from 0.0.0 before 3.0.7.

XSS Drupal Klaro Cookie Consent Management

NVD

CVSS 3.1

4.3

EPSS

0.1%

CVE-2025-47704 May 14, 17:15 PHP MEDIUM PATCH This Month

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Klaro Cookie & Consent Management allows Cross-Site Scripting (XSS).0.0 before 3.0.5. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Drupal Klaro Cookie Consent Management

NVD

CVSS 3.1

6.1

EPSS

0.2%

CVE-2025-5682 PHP

EPSS 0% CVSS 4.3

MEDIUM PATCH This Month

XSS Drupal Klaro Cookie Consent Management

NVD

CVE-2025-47704 PHP

EPSS 0% CVSS 6.1

MEDIUM PATCH This Month

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Klaro Cookie & Consent Management allows Cross-Site Scripting (XSS).0.0 before 3.0.5. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Drupal Klaro Cookie Consent Management

NVD