CVE-2025-8092: COOKiES Consent Management - Moderately critical - Cross-site Scripting - SA-CONTRIB-2025-092
Published Aug 15, 2025
·Updated
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal COOKiES Consent Management allows Cross-Site Scripting (XSS).This issue affects COOKiES Consent Management: from 0.0.0 before 1.2.16.
Affected Software
2 affected components
Drupal COOKiES Consent Management>0.0.0, <1.2.16
Cookies Consent Management Project Cookies Consent Management Drupal<1.2.16
Event History
Aug 15, 2025
CVE Published
via MITRE·04:26 PM
Data Sourced
via MITRE·04:26 PM
DescriptionWeakness
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-8092?
CVE-2025-8092 is considered a medium severity vulnerability due to its potential for Cross-Site Scripting (XSS) attacks.
2
How do I fix CVE-2025-8092?
To fix CVE-2025-8092, update the COOKiES Consent Management module to version 1.2.16 or later.
3
What software is affected by CVE-2025-8092?
CVE-2025-8092 affects Drupal COOKiES Consent Management versions prior to 1.2.16.
4
What type of vulnerability is CVE-2025-8092?
CVE-2025-8092 is classified as a Cross-Site Scripting (XSS) vulnerability.
5
Can CVE-2025-8092 allow for unauthorized actions?
Yes, if exploited, CVE-2025-8092 can allow attackers to execute unauthorized JavaScript in the context of a user's browser.