Lucene search
+L

11 matches found

EUVD
EUVD
•added 2025/10/03 8:07 p.m.•18 views

EUVD-2022-15358

Malicious code in bioql PyPI...

6.1CVSS6.2AI score0.0156EPSS
SaveExploits2References2
CVE
CVE
•added 2024/02/05 9:21 p.m.•95 views

CVE-2023-6700

The Cookie Information | Free GDPR Consent Solution plugin for WordPress is vulnerable to arbitrary option updates in versions up to and including 2.0.22 . The root cause is a missing capability check on its AJAX request handler , allowing authenticated attackers with subscriber-level access or h...

8.8CVSS8.3AI score0.01458EPSS
SaveIn wildExploits2References2Affected Software1
Cvelist
Cvelist
•added 2024/02/05 9:21 p.m.•59 views

CVE-2023-6700 Cookie Information | Free GDPR Consent Solution <= 2.0.22 - Authenticated (Subscriber+) Arbitrary Options Update

The Cookie Information | Free GDPR Consent Solution plugin for WordPress is vulnerable to arbitrary option updates due to a missing capability check on its AJAX request handler in versions up to, and including, 2.0.22. This makes it possible for authenticated attackers, with subscriber-level acce...

8.8CVSS8.6AI score0.01458EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/05 12:00 a.m.•3 views

CVE-2023-6700: Missing Authorization

The Cookie Information | Free GDPR Consent Solution plugin for WordPress is vulnerable to arbitrary option updates due to a missing capability check on its AJAX request handler in versions up to, and including, 2.0.22. This makes it possible for authenticated attackers, with subscriber-level acce...

8.8CVSS5.6AI score0.01458EPSS
SaveExploits2References3
CNNVD
CNNVD
•added 2024/02/05 12:00 a.m.•24 views

WordPress plugin Cookie Information | Free GDPR Consent Solution Security Breach

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

8.8CVSS6.5AI score0.01458EPSS
SaveExploits2References3
attackerkb
attackerkb
•added 2022/03/14 3:15 p.m.•14 views

CVE-2022-0147

The Cookie Information | Free GDPR Consent Solution WordPress plugin before 2.0.8 does not escape user data before outputting it back in attributes in the admin dashboard, leading to a Reflected Cross-Site Scripting issue...

6.1CVSS6.3AI score0.0156EPSS
SaveExploits2References4
NVD
NVD
•added 2022/03/14 3:15 p.m.•26 views

CVE-2022-0147

The Cookie Information | Free GDPR Consent Solution WordPress plugin before 2.0.8 does not escape user data before outputting it back in attributes in the admin dashboard, leading to a Reflected Cross-Site Scripting issue...

6.1CVSS0.0156EPSS
SaveExploits2References2
Prion
Prion
•added 2022/03/14 3:15 p.m.•20 views

Cross site scripting

The Cookie Information | Free GDPR Consent Solution WordPress plugin before 2.0.8 does not escape user data before outputting it back in attributes in the admin dashboard, leading to a Reflected Cross-Site Scripting issue...

4.3CVSS6AI score0.0156EPSS
SaveExploits2References2Affected Software1
Positive Technologies
Positive Technologies
•added 2022/03/14 12:00 a.m.•4 views

PT-2022-12995

Name of the Vulnerable Software and Affected Versions The Cookie Information | Free GDPR Consent Solution WordPress plugin versions prior to 2.0.8 Description The issue is related to a Reflected Cross-Site Scripting problem. It occurs because the plugin does not properly escape user data before...

6.1CVSS5.9AI score0.0156EPSS
SaveExploits2References5
CNNVD
CNNVD
•added 2022/03/14 12:00 a.m.•16 views

WordPress plugin 跨站脚本漏洞

WordPress is a set of blogging platforms developed by the Wordpress Foundation using the PHP language. WordPress plugin is a WordPress application plugin. WordPress Cookie Information | Free GDPR Consent Solution plugin prior to version 2.0.8 is vulnerable to A cross-site scripting vulnerability...

6.1CVSS5.2AI score0.0156EPSS
SaveExploits2References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/14 12:00 a.m.•6 views

CVE-2022-0147: Improper Neutralization of Input During Web Page Generation

The Cookie Information | Free GDPR Consent Solution WordPress plugin before 2.0.8 does not escape user data before outputting it back in attributes in the admin dashboard, leading to a Reflected Cross-Site Scripting issue...

6.1CVSS6.4AI score0.0156EPSS
SaveExploits2References3
Rows per page
Query Builder