PT-2025-30615 · Drupal · Drupal Cookies Consent Management

Cathy Theys + 5 · Published 2025-07-23 · Updated 2025-08-16 · CVE-2025-8092

Positive Technologies (AI Summary)

CVSS v3.1

7.6

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L

Name of the Vulnerable Software and Affected Versions: Drupal COOKiES Consent Management versions prior to 1.2.16

Description: A Cross-Site Scripting (XSS) issue exists in Drupal COOKiES Consent Management. This affects versions using the COOKiES Video submodule.

Recommendations: Update to version 1.2.16.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-8092

DRUPAL-CONTRIB-2025-092

Affected Products

Drupal Cookies Consent Management

References · 8

• https://osv.dev/vulnerability/CVE-2025-8092 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-8092 · Security Note
• https://twitter.com/CVEnew/status/1956654814156509442 · Twitter Post
• https://twitter.com/drupalaid/status/1948069425170849919 · Twitter Post
• https://t.me/CVEtracker/30144 · Telegram Post
• https://drupal.org/sa-contrib-2025-092 · Note
• https://t.me/cveNotify/132515 · Telegram Post
• https://twitter.com/fernandokarl/status/1956436820117385400 · Twitter Post