Klaro Cookie Consent Management

1 CVEs product

Monthly

CVE-2025-47704 MEDIUM PATCH This Month

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Klaro Cookie & Consent Management allows Cross-Site Scripting (XSS).0.0 before 3.0.5. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Klaro Cookie Consent Management Drupal
NVD
CVSS 3.1
6.1
EPSS
0.2%
CVE-2025-47704
EPSS 0% CVSS 6.1
MEDIUM PATCH This Month

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Klaro Cookie & Consent Management allows Cross-Site Scripting (XSS).0.0 before 3.0.5. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Klaro Cookie Consent Management Drupal
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy