Skip to content
OpenAdvisories
Unscored CVE-2021-24590 EUVD-2021-11502GHSA-jghc-2mp4-x4fj

Cookie Notice & Consent Banner for GDPR & CCPA Compliance < 1.7.2 - Authenticated Stored XSS

Published Sep 6, 2021 · Updated Aug 3, 2024 · Assigned by WPScan

Description

The Cookie Notice & Consent Banner for GDPR & CCPA Compliance WordPress plugin before 1.7.2 does not properly sanitize inputs to prevent injection of arbitrary HTML within the plugin's design customization options.

Affected products

VendorProductAffectedFixed
— Cookie Notice & Consent Banner for GDPR & CCPA Compliance 1.7.2 – < 1.7.2 1.7.2

References