Security Advisory

CVE-2013-7064

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2014-04-29 14:00:00
Last updated 2024-08-06 17:53:46
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Cross-site scripting (XSS) vulnerability in the EU Cookie Compliance module 7.x-1.x before 7.x-1.12 for Drupal allows remote authenticated administrators with the "Administer EU Cookie Compliance popup" permission to inject arbitrary web script or HTML via unspecified configuration values.