CVE-2024-8397

The webtoffee-gdpr-cookie-consent WordPress plugin (versions prior to 2.6.1 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the improper sanitization and escaping of IP headers during the logging process. An unauthenticated visitor can submit a malicious payload that exec...