Skip to content
Not rated

CVE-2022-0193 The Complianz WordPress plugin before 6.0.0 does not escape the s parameter before outputting it back in an attribute in…

Description

The Complianz WordPress plugin before 6.0.0 does not escape the s parameter before outputting it back in an attribute in an admin page, leading to a Reflected Cross-Site Scripting

Affected products and versions

Product Affected versions Fixed in
Complianz – GDPR/CCPA Cookie Consent 6.0 earliest → < 6.0.0 6.0.0
The 2 CVEs of Complianz – GDPR/CCPA Cookie Consent →
Track this CVE