CVE-2026-96379

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal CookieCuttr allows Stored XSS. This issue affects CookieCuttr versions: from 2.0.0 to 2.0.3...

CVE-2026-96379

The Drupal CookieCuttr module versions 2.0.0 through 2.0.3 are vulnerable to a Stored Cross-site Scripting (XSS) issue. The root cause is the insufficient filtering of input submitted via the Cookiecuttr administration form , which allows specially crafted values to be stored and subsequently ren...

EUVD-2026-107820

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal CookieCuttr allows Stored XSS. This issue affects CookieCuttr versions: from 2.0.0 to 2.0.3...

DRUPAL-CONTRIB-2026-181

This module enables you to provide information and options about cookie usage. The module does not sufficiently filter input submitted through the Cookiecuttr administration form. This could allow specially crafted values to be stored and later rendered without adequate sanitization, resulting in...

PT-2026-97671

Name of the Vulnerable Software and Affected Versions Drupal CookieCuttr versions 2.0.0 through 2.0.3 Description Stored Cross-site Scripting XSS occurs because the module does not sufficiently filter input submitted through the administration form. This allows specially crafted values to be stor...

CookieCuttr - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-181

This module enables you to provide information and options about cookie usage. The module does not sufficiently filter input submitted through the Cookiecuttr administration form. This could allow specially crafted values to be stored and later rendered without adequate sanitization, resulting in...