Skip to content
OpenAdvisories
Medium · 6.5 CVE-2025-58607 EUVD-2025-26559GHSA-96v6-6549-c5x9

WordPress Cookie Notice & Consent Banner for GDPR & CCPA Compliance Plugin <= 1.7.11 - Cross Site Scripting (XSS) Vulnerability

Published Sep 3, 2025 · Updated May 12, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GDPR Info Cookie Notice & Consent Banner for GDPR & CCPA Compliance cookie-notice-and-consent-banner allows Stored XSS.This issue affects Cookie Notice & Consent Banner for GDPR & CCPA Compliance: from n/a through <= 1.7.11.

Affected products

VendorProductAffectedFixed
GDPR Info Cookie Notice & Consent Banner for GDPR & CCPA Compliance ≤ 1.7.11 —

References