2 matches found
CVE-2021-24653
The Cookie Bar WordPress plugin before 1.8.9 doesn't properly sanitise the Cookie Bar Message setting, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...
4.8CVSS5.8AI score0.00617EPSS
SaveExploits2References1
CVE-2021-24653: Improper Neutralization of Input During Web Page Generation
The Cookie Bar WordPress plugin before 1.8.9 doesn't properly sanitise the Cookie Bar Message setting, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...
4.8CVSS5.9AI score0.00617EPSS
SaveExploits2References3
20