oveleon/contao-cookiebar

oveleon/contao-cookiebar

GitHubGitHub
GitHubgithub.com
Releases142
Frequency2 weeks 10 hours
Last Release
Stars62
Cookie bar for the Contao Open Source CMS
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2024-47069↗
6.1 MEDIUM—

Oveleon Cookie Bar is a cookie bar is for the Contao Open Source CMS and allows a visitor to define cookie & privacy settings for the website. Prior to versions 1.16.3 and 2.1.3, the `block/locale` endpoint does not properly sanitize the user-controlled `locale` input before including it in the backend's HTTP response, thereby causing reflected cross-site scripting. Versions 1.16.3 and 2.1.3 contain a patch for the vulnerability.