Lucene search
WPScanCVELIST:CVE-2021-24569HistorySep 27, 2021 - 3:25 p.m.
CVE-2021-24569 Cookie Notice & Compliance for GDPR / CCPA < 2.1.2 - Admin+ Stored Cross-Site Scripting
2021-09-2715:25:21
CWE-79
WPScan
www.cve.org
1
cve-2021-24569
cross-site scripting
wordpress plugin
EPSS
0.001
Percentile
24.8%
The Cookie Notice & Compliance for GDPR / CCPA WordPress plugin before 2.1.2 does not escape the value of its Button Text setting when outputting it in an attribute in the frontend, allowing high privilege users such as admin to perform Cross-Site Scripting even when the unfiltered_html capability is disallowed.
CNA Affected
[
{
"product": "Cookie Notice & Compliance for GDPR / CCPA",
"vendor": "Unknown",
"versions": [
{
"lessThan": "2.1.2",
"status": "affected",
"version": "2.1.2",
"versionType": "custom"
}
]
}
]Related
prion
prion
Cross site scripting
2021-09-27 16:15:00
patchstack
patchstack
wpvulndb
wpvulndb
openvas
openvas
nvd
nvd
CVE-2021-24569
2021-09-27 16:15:08
cve
cve
CVE-2021-24569
2021-09-27 16:15:08
wpexploit
wpexploit