1356 matches found
CVE-2020-20628
controller/controller-comments.php in WP GDPR plugin through 2.1.1 has unauthenticated stored XSS...
PT-2020-15275
Name of the Vulnerable Software and Affected Versions WP GDPR plugin versions prior to 2.1.2 Description The issue is related to unauthenticated stored XSS in the controller/controller-comments.php file. Recommendations For WP GDPR plugin versions prior to 2.1.2, update to version 2.1.2 or later ...
CVE-2020-20628: Improper Neutralization of Input During Web Page Generation
controller/controller-comments.php in WP GDPR plugin through 2.1.1 has unauthenticated stored XSS...
CVE-2020-20633
ajaxpolicygenerator in admin/modules/cli-policy-generator/classes/class-policy-generator-ajax.php in GDPR Cookie Consent cookie-law-info 1.8.2 and below plugin for WordPress, allows authenticated stored XSS and privilege escalation...
Cross site scripting
ajaxpolicygenerator in admin/modules/cli-policy-generator/classes/class-policy-generator-ajax.php in GDPR Cookie Consent cookie-law-info 1.8.2 and below plugin for WordPress, allows authenticated stored XSS and privilege escalation...
CVE-2020-20633
ajaxpolicygenerator in admin/modules/cli-policy-generator/classes/class-policy-generator-ajax.php in GDPR Cookie Consent cookie-law-info 1.8.2 and below plugin for WordPress, allows authenticated stored XSS and privilege escalation...
CVE-2020-20633
CVE-2020-20633 affects the WordPress plugin GDPR Cookie Consent (cookie-law-info) versions 1.8.2 and earlier, via ajax_policy_generator in admin/modules/cli-policy-generator/classes/class-policy-generator-ajax.php. The vulnerability allows authenticated stored XSS and privilege escalation. The co...
CVE-2020-20633: Improper Neutralization of Input During Web Page Generation
ajaxpolicygenerator in admin/modules/cli-policy-generator/classes/class-policy-generator-ajax.php in GDPR Cookie Consent cookie-law-info 1.8.2 and below plugin for WordPress, allows authenticated stored XSS and privilege escalation...
PT-2020-15276
Name of the Vulnerable Software and Affected Versions GDPR Cookie Consent cookie-law-info plugin for WordPress versions 1.8.2 and below Description The issue allows authenticated stored XSS and privilege escalation. This is related to the ajax policy generator in the...
Instagram Retained Deleted User Data Despite GDPR Rules
Instagram kept copies of deleted pictures and private direct messages on its servers even after someone removed them from their account. The Facebook-owned service acknowledged the slipup and awarded a security researcher $6,000 for finding the bug. Researcher Saugat Pokharel discovered the...
New Guide: How Akamai Helps You Protect Privacy Data
Laws and regulations related to personally identifiable information PII are continuously being enacted around the world as data breaches and abuses persist. According to the February 2020 United Nations Conference on Trade and Development, 132 out of 194 countries had legislation put in place to...
gdpr.ropeco.ro Cross Site Scripting vulnerability OBB-1244950
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
firminopolis.go.gov.br GDPR PII Exposure vulnerability OBB-1240795
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
GitLab: Ability To Delete User(s) Account Without User Interaction
Summary: Gitlab allows its user to exercise their GDPR rights Right to Access/Delete user data by sending an email to [email protected] however gitlab team doesn't ask for security questioni.e Date Of Birth before deleting the user account moreover doesn't authenticate the incoming emails...
coin-or.org GDPR PII Exposure vulnerability OBB-1223618
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
eavesdrop.openstack.org GDPR PII Exposure vulnerability OBB-1223602
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
thangamayil.com GDPR PII Exposure vulnerability OBB-1223596
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
jira.mariadb.org GDPR PII Exposure vulnerability OBB-1223464
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
libre-net.nl GDPR PII Exposure vulnerability OBB-1223457
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
165.22.219.213 GDPR PII Exposure vulnerability OBB-1222412
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...