MSRXVulnerabilities / CVE-2026-96379
CVE-2026-96379
Published 2026-10-22 · Awaiting Analysis
CVE-2026-96379
CookieCuttr - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-181
—
not scored yet
not scored yet
0.1%
chance of exploitation in the next 30 days (EPSS; higher than 4% of CVEs)
chance of exploitation in the next 30 days (EPSS; higher than 4% of CVEs)
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal CookieCuttr allows Stored XSS. This issue affects CookieCuttr versions: from 2.0.0 to 2.0.3.
Affected products
- Drupal CookieCuttr: 2.0.0 to < 2.0.3
Weakness: CWE-79
Also known as: DRUPAL-CONTRIB-2026-181
1 references (advisories, patches, write-ups)
Sources: NVD, CVE.org, OSV.dev, FIRST EPSS. Missing ones did not answer or have no record yet.