CVE-2025-48915

The Drupal COOKiES Consent Management module (versions 0.0.0 through 1.2.14 ) is vulnerable to Cross-Site Scripting (XSS) due to improper input neutralization during web page generation. The flaw exists because the module fails to adequately verify if provided JavaScript code originates from auth...

CVE-2025-48914

The COOKiES Consent Management module for Drupal (versions 0.0.0 through 1.2.14 ) is vulnerable to Cross-Site Scripting (XSS) due to improper input neutralization during web page generation. Specifically, the module fails to sufficiently validate the conversion of data-src attributes to src attri...