Security Advisory
CVE-2025-49390
7.1
HIGH
Vulnerability Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in christophrado Cookie Notice & Consent cookie-notice-consent allows Stored XSS.This issue affects Cookie Notice & Consent: from n/a through <= 1.6.4.
Published Date
November 6, 2025
Official Source
NIST NVD Advisory