Medium · 5.9 CVE-2023-32294 EUVD-2023-36548GHSA-mmc6-ggcm-7jp9

WordPress GDPR Cookie Consent Notice Box Plugin <= 1.1.6 is vulnerable to Cross Site Scripting (XSS)

Published Aug 30, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Radical Web Design GDPR Cookie Consent Notice Box plugin <= 1.1.6 versions.

Vendor	Product	Affected	Fixed
Radical Web Design	GDPR Cookie Consent Notice Box	≤ 1.1.6	—