A stored cross-site scripting (XSS) vulnerability exists in the Drupal CookieCuttr module versions 2.0.0 through 2.0.3. This vulnerability is due to improper neutralization of input during web page generation, allowing malicious scripts to be stored and executed in users' browsers.