Cross site request forgery (csrf)

2021-12-2021:15:00

PRIOn knowledge base

www.prio-n.com

8.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.5%

JSON

Cross-Site Request Forgery (CSRF) vulnerability leading to Cross-Site Scripting (XSS) discovered in tarteaucitron.js – Cookies legislation & GDPR WordPress plugin (versions <= 1.5.4), vulnerable parameters “tarteaucitronEmail” and “tarteaucitronPass”.

CPENameOperatorVersion
tarteaucitron.js_-_cookies_legislation_\\&_gdprle1.5.4

CPE	Name	Operator	Version
	tarteaucitron.js_-_cookies_legislation_\\&_gdpr	le	1.5.4

References

patchstack.com/database/vulnerability/tarteaucitronjs/wordpress-tarteaucitron-js-cookies-legislation-gdpr-plugin-1-5-4-cross-site-request-forgery-csrf-vulnerability-leading-to-cross-site-scripting-xss

wordpress.org/plugins/tarteaucitronjs/