Unscored CVE-2020-20628 EUVD-2020-13413GHSA-v62x-m7v6-q9ph

controller/controller-comments.php in WP GDPR plugin through 2.1.1 has unauthenticated stored XSS.

Published Aug 31, 2020 · Updated Aug 4, 2024 · Assigned by mitre

Description

controller/controller-comments.php in WP GDPR plugin through 2.1.1 has unauthenticated stored XSS.

References

https://blog.nintechnet.com/unauthenticated-stored-xss-and-content-spoofing-vulnerabilities-in-wordpress-wp-gdpr-plugin-unpatched/