Julian Pustkuchen

**Name of the Vulnerable Software and Affected Versions** COOKiES Consent Management versions 0.0.0 through 1.2.14 **Description** The issue affects the COOKiES Consent Management module, allowing for Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation. **Recommendations** For versions 0.0.0 through 1.2.14, update to version 1.2.15 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Drupal etracker versions 0.0.0 through 3.0.x **Description** The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting (XSS). This allows an attacker to perform Cross-Site Scripting (XSS) attacks. **Recommendations** For versions 0.0.0 through 3.0.x, update to version 3.1.0 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Drupal SpamSpan filter versions 0.0.0 through 3.2.0 **Description** The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting (XSS), in the Drupal SpamSpan filter. This allows for Cross-Site Scripting (XSS) attacks. **Recommendations** For versions 0.0.0 through 3.2.0, update to version 3.2.1 or later to resolve the issue.