CVE-2026-86606

The iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more WordPress plugin, in versions prior to 3.13.7 , is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is a failure to properly escape content re-emitted through the plugin's bundled HTML parser . This allows u...