CVE-2025-71310lowCWE-80

CVE-2025-71310: falha de baixa gravidade em BackdropCMS GDPR cookies module for Backdrop CMS

Publicada em

Seguir esta CVE+ Monitorar GDPR cookies module for Backdrop CMS

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

8Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 1.8epss 0.3%
The GDPR cookies module for Backdrop CMS (before 1.x-1.3.5) doesn't sufficiently protect visitors from Cross Site Scripting (XSS) if a malicious value has been provided for the optional 'Info content' field for the YouTube service. This is mitigated by the fact that an attacker must have a role with the permission "Create a GDPR Cookies Service" or "Edit any GDPR Cookies Service" and a site must have added a YouTube service as configuration.
CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:A/VC:N/VI:N/VA:N/SC:N/SI:L/SA:L
Produtos afetados
BackdropCMS · GDPR cookies module for Backdrop CMS