Lucene search
+L

37 matches found

Nuclei
Nuclei
•added 2026/09/25 2:05 a.m.•41 views

Beautiful Cookie Consent Banner < 2.10.2 - Cross-Site Scripting

The Beautiful Cookie Consent Banner for WordPress is vulnerable to Stored Cross-Site Scripting via the 'nscbarcontenthref' parameter in versions up to, and including, 2.10.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

7.2CVSS6.5AI score0.84341EPSS
SaveExploits0References4
Patchstack
Patchstack
•added 2026/09/18 1:40 p.m.•8 views

WordPress Complianz GDPR/CCPA Cookie Consent Banner plugin <= 7.5.4 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by theviper17y in WordPress Plugin Complianz versions = 7.5.4...

7.2CVSS5.8AI score0.00508EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2026/09/18 9:16 a.m.•14 views

CVE-2026-83561

The Complianz GDPR/CCPA Cookie Consent Banner plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via Elementor Cookie Blocker Regex in all versions up to, and including, 7.5.4 due to insufficient input sanitization and output escaping. This makes it possible for...

7.2CVSS0.00508EPSS
SaveExploits0References10
CVE
CVE
•added 2026/09/18 8:28 a.m.•37 views

CVE-2026-83561

The Complianz GDPR/CCPA Cookie Consent Banner plugin for WordPress (versions up to and including 7.5.4 ) is vulnerable to unauthenticated Stored Cross-Site Scripting via the Elementor Cookie Blocker Regex, caused by insufficient input sanitization and output escaping. An attacker can inject arbit...

7.2CVSS5.8AI score0.00508EPSS
SaveExploits0References10
EUVD
EUVD
•added 2026/09/18 8:28 a.m.•9 views

EUVD-2026-82792

The Complianz GDPR/CCPA Cookie Consent Banner plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via Elementor Cookie Blocker Regex in all versions up to, and including, 7.5.4 due to insufficient input sanitization and output escaping. This makes it possible for...

7.2CVSS5.8AI score0.00508EPSS
SaveExploits0References10
Vulnrichment
Vulnrichment
•added 2026/09/18 8:28 a.m.•14 views

CVE-2026-83561 Complianz GDPR/CCPA Cookie Consent Banner <= 7.5.4 - Unauthenticated Stored Cross-Site Scripting via Elementor Cookie Blocker Regex

The Complianz GDPR/CCPA Cookie Consent Banner plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via Elementor Cookie Blocker Regex in all versions up to, and including, 7.5.4 due to insufficient input sanitization and output escaping. This makes it possible for...

7.2CVSS5.8AI score0.00508EPSS
SaveExploits0References10
Cvelist
Cvelist
•added 2026/09/18 8:28 a.m.•42 views

CVE-2026-83561 Complianz GDPR/CCPA Cookie Consent Banner <= 7.5.4 - Unauthenticated Stored Cross-Site Scripting via Elementor Cookie Blocker Regex

The Complianz GDPR/CCPA Cookie Consent Banner plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via Elementor Cookie Blocker Regex in all versions up to, and including, 7.5.4 due to insufficient input sanitization and output escaping. This makes it possible for...

7.2CVSS0.00508EPSS
SaveExploits0References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/18 12:00 a.m.•1 views

CVE-2026-83561: Improper Neutralization of Input During Web Page Generation

The Complianz GDPR/CCPA Cookie Consent Banner plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via Elementor Cookie Blocker Regex in all versions up to, and including, 7.5.4 due to insufficient input sanitization and output escaping. This makes it possible for...

7.2CVSS5.8AI score0.00508EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•14 views

EUVD-2025-19989

Malicious code in bioql PyPI...

7.1CVSS6.5AI score0.00191EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/07/06 11:21 a.m.•24 views

CVE-2025-49866

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Nikel Beautiful Cookie Consent Banner beautiful-and-responsive-cookie-consent allows Reflected XSS.This issue affects Beautiful Cookie Consent Banner: from n/a through = 4.6.1...

7.1CVSS5.9AI score0.00191EPSS
SaveExploits0References1
NVD
NVD
•added 2025/07/04 12:15 p.m.•18 views

CVE-2025-49866

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Nikel Beautiful Cookie Consent Banner beautiful-and-responsive-cookie-consent allows Reflected XSS.This issue affects Beautiful Cookie Consent Banner: from n/a through = 4.6.1...

7.1CVSS0.00191EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/07/04 11:17 a.m.•26 views

CVE-2025-49866 WordPress Beautiful Cookie Consent Banner plugin <= 4.6.1 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Nikel Beautiful Cookie Consent Banner beautiful-and-responsive-cookie-consent allows Reflected XSS.This issue affects Beautiful Cookie Consent Banner: from n/a through = 4.6.1...

7.1CVSS0.00191EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/07/04 12:00 a.m.•12 views

WordPress plugin Beautiful Cookie Consent Banner 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

7.1CVSS5.9AI score0.00191EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/04 12:00 a.m.•1 views

CVE-2025-49866: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Nikel Beautiful Cookie Consent Banner beautiful-and-responsive-cookie-consent allows Reflected XSS.This issue affects Beautiful Cookie Consent Banner: from n/a through = 4.6.1...

7.1CVSS5.8AI score0.00191EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 6:05 a.m.•11 views

CVE-2023-3388

The Beautiful Cookie Consent Banner for WordPress is vulnerable to Stored Cross-Site Scripting via the 'nscbarcontenthref' parameter in versions up to, and including, 2.10.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

7.2CVSS5.1AI score0.84341EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 11:12 p.m.•34 views

CVE-2022-3823

The Beautiful Cookie Consent Banner WordPress plugin before 2.9.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite...

4.8CVSS5.6AI score0.0049EPSS
SaveExploits1
attackerkb
attackerkb
•added 2024/06/07 3:15 a.m.•4 views

CVE-2024-5607

The GDPR CCPA Compliance & Cookie Consent Banner plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several functions named ajaxUpdateSettings in all versions up to, and including, 2.7.0. This makes it possible for authenticated attackers,...

5.4CVSS6AI score0.00276EPSS
SaveExploits0References3
NVD
NVD
•added 2024/06/07 3:15 a.m.•31 views

CVE-2024-5607

The GDPR CCPA Compliance & Cookie Consent Banner plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several functions named ajaxUpdateSettings in all versions up to, and including, 2.7.0. This makes it possible for authenticated attackers,...

5.4CVSS0.00276EPSS
SaveExploits0References2
OSV
OSV
•added 2024/06/07 3:15 a.m.•13 views

CVE-2024-5607

The GDPR CCPA Compliance & Cookie Consent Banner plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several functions named ajaxUpdateSettings in all versions up to, and including, 2.7.0. This makes it possible for authenticated attackers,...

5.4CVSS5.9AI score0.00276EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2024/06/07 1:59 a.m.•18 views

WordPress GDPR CCPA Compliance & Cookie Consent Banner plugin <= 2.7.0 - Missing Authorization to Settings Update and Stored Cross-Site Scripting vulnerability

Missing Authorization to Settings Update and Stored Cross-Site Scripting vulnerability discovered by Lucio Sá in WordPress Plugin GDPR CCPA Compliance Support versions = 2.7.0...

5.4CVSS5.8AI score0.00276EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder