CVE-2025-31475

Summary

CVE-2025-31475 is a vulnerability affecting tarteaucitron.js, a popular cookie banner solution, before version 1.20.1. The issue lies in the addOrUpdate function, which does not properly validate input for custom texts. An attacker with direct access to the source code or a CMS plugin can manipulate JavaScript object prototypes, potentially leading to data corruption, unintended code execution, application crashes, or even the introduction of additional security vulnerabilities. The impact depends on the application's architecture. This vulnerability has been addressed in version 1.20.1.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.