Unscored severity · published Apr 29, 2014
CVE-2013-7064
Cross-site scripting (XSS) vulnerability in the EU Cookie Compliance module 7.x-1.x before 7.x-1.12 for Drupal allows remote authenticated administrators with the "Administer EU…
–
CVSS
0.9%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in the EU Cookie Compliance module 7.x-1.x before 7.x-1.12 for Drupal allows remote authenticated administrators with the "Administer EU Cookie Compliance popup" permission to inject arbitrary web script or HTML via unspecified configuration values.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 61% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EC
EU Cookie Compliance · Freelance-it-consultant
through 7.x-1.11; 7.x-1.0; 7.x-1.1; 7.x-1.2; 7.x-1.6; 7.x-1.7; +4 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-7064
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-7064
www.openwall.com
http://www.openwall.com/lists/oss-security/2013/12/06/7
www.openwall.com
http://www.openwall.com/lists/oss-security/2013/12/12/1
Patch
https://drupal.org/node/2139875
Patch
https://drupal.org/node/2140123
More from EU Cookie Compliance
5.0
CVE-2025-48917
EU Cookie Compliance (GDPR Compliance) - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-072