Skip to content
OpenAdvisories

Vendor

IZSoft

1 known vulnerabilities.

Products

Easy Cookies Policy 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Unscored —
    CVE-2021-24405 Public exploit EPSS 11%

    Easy Cookie Policy <= 1.6.2 - Broken Access Control to Stored Cross-Site Scripting

    The Easy Cookies Policy WordPress plugin through 1.6.2 is lacking any capability and CSRF check when saving its settings, allowing any authenticated users (such as subscriber) to change them. If users can't register, this can be done through CSRF. Furthermore…

    IZSoft Easy Cookies Policy Web / CMS