VYPR

GDPR cookies module

by Backdrop CMS

Source repositories

CVEs (1)

  • CVE-2025-71310LowMay 26, 2026
    risk 0.05cvss epss 0.00

    The GDPR cookies module for Backdrop CMS (before 1.x-1.3.5) doesn't sufficiently protect visitors from Cross Site Scripting (XSS) if a malicious value has been provided for the optional 'Info content' field for the YouTube service. This is mitigated by the fact that an…