Cross-Site Scripting Vulnerability in Klaro Cookie & Consent Management by Drupal

CVE-2025-47704

What is CVE-2025-47704?

A Cross-Site Scripting (XSS) vulnerability exists in the Klaro Cookie & Consent Management tool due to improper neutralization of user input during web page generation. This vulnerability affects versions from 0.0.0 up to, but not including, 3.0.5, allowing malicious actors to inject arbitrary scripts into web pages viewed by users. Exploitation of this XSS issue could lead to unauthorized access to sensitive information and web session hijacking, posing significant security risks to websites utilizing the affected product.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References