Medium · 6.5 CVE-2023-24400 EUVD-2023-28456GHSA-9g44-vhqm-37wp

WordPress Cookie Notice & Compliance for GDPR / CCPA Plugin <= 2.4.6 is vulnerable to Cross Site Scripting (XSS)

Published May 6, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in Hu-manity.Co Cookie Notice & Compliance for GDPR / CCPA plugin <= 2.4.6 versions.

Vendor	Product	Affected	Fixed
Hu-manity.co	Cookie Notice & Compliance for GDPR / CCPA	≤ 2.4.6	—