🔐 CVE Alert

CVE-2026-96379

UNKNOWN 0.0

CookieCuttr - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-181

CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal CookieCuttr allows Stored XSS. This issue affects CookieCuttr versions: from 2.0.0 to 2.0.3.

CWE CWE-79
Vendor drupal
Product cookiecuttr
Ecosystems
Industries
WebMedia
Published Oct 22, 2026
Stay Ahead of the Next One

Get instant alerts for drupal cookiecuttr

Be the first to know when new unknown vulnerabilities affecting drupal cookiecuttr are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Drupal / CookieCuttr
2.0.0 < 2.0.3

References

NVD ↗ CVE.org ↗ EPSS Data ↗
drupal.org: https://www.drupal.org/sa-contrib-2026-181

Credits

Swan Kalata (akalata) Marcus Johansson (marcus_johansson) Malcolm Young (malcomio) Swan Kalata (akalata) Bram Driesen (bramdriesen) Greg Knaddison (greggles) Jess (xjm)