CVE-2024-9072

The CVE-2024-9072 entry concerns the GDPR-Extensions-com – Consent Manager WordPress plugin. It describes a Stored Cross-Site Scripting (XSS) vulnerability via SVG file uploads in all versions up to 1.0.0, caused by insufficient input sanitization and output escaping. An attacker with Author-leve...