CVE-2024-8397

The webtoffee-gdpr-cookie-consent WordPress plugin (versions prior to 2.6.1 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the failure to properly sanitize and escape IP headers during the logging process. An attacker can inject a malicious payload that executes in the a...