WordPress Cookie Information - Free GDPR Consent Solution Plugin < 2.0.8 XSS Vulnerability

The WordPress plugin Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...

WordPress Cookie Information | Free GDPR Consent Solution plugin cross-site scripting vulnerability

WordPress is a set of blogging platforms developed by the Wordpress Foundation using the PHP language. WordPress plugin is a WordPress application plugin. WordPress Cookie Information | Free GDPR Consent Solution plugin prior to version 2.0.8 is vulnerable to A cross-site scripting vulnerability...

CVE-2022-0147

The Cookie Information | Free GDPR Consent Solution WordPress plugin before 2.0.8 does not escape user data before outputting it back in attributes in the admin dashboard, leading to a Reflected Cross-Site Scripting issue...

CVE-2022-0147

The Cookie Information | Free GDPR Consent Solution WordPress plugin before 2.0.8 does not escape user data before outputting it back in attributes in the admin dashboard, leading to a Reflected Cross-Site Scripting issue...

CVE-2022-0147

The Cookie Information | Free GDPR Consent Solution WordPress plugin before 2.0.8 does not escape user data before outputting it back in attributes in the admin dashboard, leading to a Reflected Cross-Site Scripting issue...

Cross site scripting

The Cookie Information | Free GDPR Consent Solution WordPress plugin before 2.0.8 does not escape user data before outputting it back in attributes in the admin dashboard, leading to a Reflected Cross-Site Scripting issue...

CVE-2022-0147

The CVE describes a Reflected Cross-Site Scripting vulnerability in the WordPress plugin “Cookie Information / Free GDPR Consent Solution” prior to version 2.0.8. The issue arises because user data is not escaped before being output in admin-dashboard attributes, enabling script injection in the ...

WordPress Cookie Information plugin <= 2.0.7 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by Krzysztof Zając in WordPress Cookie Information plugin versions = 2.0.7. Solution Update the WordPress Cookie Information plugin to the latest available version at least 2.0.8...

ZTE MF971R Cross-Site Scripting Vulnerability (CNVD-2021-92822)

The ZTE MF971R is a Cat 6 LTE mobile Wi-Fi router with download speeds up to 300mbps and upload speeds up to 50mbps.A reflective cross-site scripting vulnerability exists in the ZTE MF971R. An attacker could use this vulnerability to obtain cookie information...

ZTE MF971R Cross-Site Scripting Vulnerability

The ZTE MF971R is a Cat 6 LTE mobile Wi-Fi router with download speeds up to 300mbps and upload speeds up to 50mbps. The ZTE MF971R suffers from a type of cross-site scripting vulnerability. An attacker can exploit the vulnerability to obtain cookie information...

CVE-2021-21746

ZTE MF971R product has reflective XSS vulnerability. An attacker could use the vulnerability to obtain cookie information...

CVE-2021-21746

ZTE MF971R product has reflective XSS vulnerability. An attacker could use the vulnerability to obtain cookie information...

CVE-2021-21747

ZTE MF971R product has reflective XSS vulnerability. An attacker could use the vulnerability to obtain cookie information...

Cross site scripting

ZTE MF971R product has reflective XSS vulnerability. An attacker could use the vulnerability to obtain cookie information...

Cross site scripting

ZTE MF971R product has reflective XSS vulnerability. An attacker could use the vulnerability to obtain cookie information...

CVE-2021-21747

ZTE MF971R product has reflective XSS vulnerability. An attacker could use the vulnerability to obtain cookie information...

CVE-2021-21747

CVE-2021-21747 affects the ZTE MF971R router, with a reflective XSS in the web API. The vulnerability resides in the /api/xmlclient/post endpoint’s cmd parameter, which is not properly sanitized and is reflected in the HTTP response, enabling arbitrary JavaScript execution in the victim’s browser...

CVE-2021-21746

The CVE-2021-21746 entry concerns the ZTE MF971R mobile router, where a reflective Cross-Site Scripting (XSS) vulnerability exists in the device’s web application/API layer. The issue enables an attacker to reflect user-supplied input via certain web API endpoints, leading to arbitrary JavaScript...

CVE-2021-21746

ZTE MF971R product has reflective XSS vulnerability. An attacker could use the vulnerability to obtain cookie information...

ZTE MF971R LTE router 跨站脚本漏洞

The ZTE MF971R is a Cat 6 LTE mobile Wi-Fi router with download speeds up to 300mbps and upload speeds up to 50mbps. The ZTE MF971R suffers from a type of cross-site scripting vulnerability. An attacker can exploit the vulnerability to obtain cookie information...