CVE-2021-24814: Improper Neutralization of Input During Web Page Generation

The checkprivacysettings AJAX action of the WordPress GDPR WordPress plugin before 1.9.26, available to both unauthenticated and authenticated users, responds with JSON data without an "application/json" content-type. Since an HTML payload isn't properly escaped, it may be interpreted by a web...

PT-2022-9470

Name of the Vulnerable Software and Affected Versions WordPress GDPR WordPress plugin versions prior to 1.9.26 Description The issue concerns the check privacy settings AJAX action in the WordPress GDPR WordPress plugin. This action is accessible to both unauthenticated and authenticated users an...

CVE-2022-0220: Improper Encoding or Escaping of Output

The checkprivacysettings AJAX action of the WordPress GDPR WordPress plugin before 1.9.27, available to both unauthenticated and authenticated users, responds with JSON data without an "application/json" content-type. Since an HTML payload isn't properly escaped, it may be interpreted by a web...

CVE-2021-36889: Improper Neutralization of Input During Web Page Generation

Multiple Stored Authenticated Cross-Site Scripting XSS vulnerabilities were discovered in tarteaucitron.js – Cookies legislation & GDPR WordPress plugin versions = 1.6...