Lucene search

K
cvelistWPScanCVELIST:CVE-2021-24590
HistorySep 06, 2021 - 11:09 a.m.

CVE-2021-24590 Cookie Notice & Consent Banner for GDPR & CCPA Compliance < 1.7.2 - Authenticated Stored XSS

2021-09-0611:09:29
CWE-79
WPScan
www.cve.org
1
cve-2021-24590
stored xss
wordpress plugin
gdpr
ccpa
html injection

EPSS

0.001

Percentile

24.8%

The Cookie Notice & Consent Banner for GDPR & CCPA Compliance WordPress plugin before 1.7.2 does not properly sanitize inputs to prevent injection of arbitrary HTML within the plugin’s design customization options.

CNA Affected

[
  {
    "product": "Cookie Notice & Consent Banner forΒ GDPR & CCPA Compliance",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThan": "1.7.2",
        "status": "affected",
        "version": "1.7.2",
        "versionType": "custom"
      }
    ]
  }
]

EPSS

0.001

Percentile

24.8%

Related for CVELIST:CVE-2021-24590