WordPress WP Cookie Notice for GDPR, CCPA & ePrivacy Consent plugin <= 4.4.6 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Nguyen Kim Sang HPT Vietnam in WordPress Plugin WP Cookie Notice for GDPR, CCPA & ePrivacy Consent versions = 4.4.6...

CVE-2025-22578

CVE-2025-22578 describes a stored XSS vulnerability in the WordPress plugin WP Cookie. The initial record states an Improper Neutralization of Input During Web Page Generation vulnerability (stored XSS) affecting WP Cookie versions up to 1.0.0. Red Hat/Wordfence entries corroborate the CVE identi...