Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
wpvulndbWpvulndbWPVDB-ID:97809791-F83E-4CF3-8EC5-1672D3DD36C8
HistoryMar 02, 2023 - 12:00 a.m.

Cookie Notice & Compliance for GDPR / CCPA < 2.4.7 - Contributor+ XSS

2023-03-0200:00:00
wpscan.com
6
plugin
vulnerability
gdpr / ccpa

0.0005 Low

EPSS

Percentile

17.5%

JSON

The plugin does not validate and escape some of its cookies_revoke shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks

CPENameOperatorVersion
cookie-noticelt2.4.7

Related

cvelist 1
cve 1
prion 1
nvd 1
openvas 1
wordfence 1
cvelist
cvelist
CVE-2023-24400 WordPress Cookie Notice & Compliance for GDPR / CCPA Plugin <= 2.4.6 is vulnerable to Cross Site Scripting (XSS)
2023-05-06 23:03:02
cve
cve
CVE-2023-24400
2023-05-07 00:15:09
prion
prion
Cross site scripting
2023-05-07 00:15:00
nvd
nvd
CVE-2023-24400
2023-05-07 00:15:09
openvas
openvas
WordPress Cookie Notice & Compliance for GDPR / CCPA Plugin < 2.4.7 Multiple XSS Vulnerabilities
2023-03-29 00:00:00
wordfence
wordfence
Wordfence Intelligence Weekly WordPress Vulnerability Report (Feb 27, 2023 to Mar 5, 2023)
2023-03-09 14:32:10

0.0005 Low

EPSS

Percentile

17.5%

JSON
Related for WPVDB-ID:97809791-F83E-4CF3-8EC5-1672D3DD36C8
cvelist1cve1prion1nvd1openvas1wordfence1