backdropcms Vulnerabilities and Affected Products
Vulnerabilities associated with GDPR cookies module for Backdrop CMS.
Products
Clear product- backdrop3 vulnerabilities
- Bootstrap 5 Lite theme1 vulnerability
- Bootstrap Lite theme1 vulnerability
- Flag1 vulnerability
- GDPR cookies module for Backdrop CMS1 vulnerability
- Link iframe formatter1 vulnerability
- Mail Disguise1 vulnerability
- Masquerade1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
Generated title:GDPR Cookies Module for Backdrop CMS Cross-Site ScriptingThe GDPR cookies module for Backdrop CMS (before 1.x-1.3.5) doesn't sufficiently protect visitors from Cross Site Scripting (XSS) if a malicious value has been provided for the optional 'Info content' field for the YouTube service. This is mitigated by the fact that an attacker must have a role with the permission "Create a GDPR Cookies Service" or "Edit any GDPR Cookies Service" and a site must have added a YouTube service as configuration. CWE-80May 26, 2026 | CVSS1.8v4.0 | EPSS0.264% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |