Lucene search

Asif Nawaz MinhasPATCHSTACK:CE7D8E592CEAD5FBC772E9959728BB23

HistoryAug 30, 2021 - 12:00 a.m.

WordPress Cookie Notice & Compliance for GDPR / CCPA plugin <= 2.1.3 - Stored Cross-Site Scripting (XSS) vulnerability

2021-08-3000:00:00

Asif Nawaz Minhas

patchstack.com

wordpress

cookie notice

compliance

gdpr

ccpa

plugin

stored cross-site scripting

xss

vulnerability

update

asif nawaz minhas

EPSS

0.001

Percentile

24.8%

JSON

Stored Cross-Site Scripting (XSS) vulnerability discovered by Asif Nawaz Minhas in WordPress Cookie Notice & Compliance for GDPR / CCPA plugin (versions <= 2.1.3).

Solution

           Update the WordPress Cookie Notice & Compliance for GDPR / CCPA plugin to the latest available version (at least 2.1.4).

References

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-24569

wordpress.org/plugins/cookie-notice/#developers

wpscan.com/vulnerability/38053e05-4b17-4fa9-acd3-85d8529b202b

EPSS

0.001

Percentile

24.8%

JSON

Related for PATCHSTACK:CE7D8E592CEAD5FBC772E9959728BB23