4.8
Moyenne
CVE-2025-1621 The GDPR Cookie Compliance WordPress plugin before 4.15.7 does not sanitise and escape some of its settings, which…
Description
The GDPR Cookie Compliance WordPress plugin before 4.15.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| GDPR Cookie Compliance 4.15 | premières → < 4.15.7 | 4.15.7 |
Références
- wpscan.com wpscan.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de GDPR Cookie Compliance
Les 7 CVE de GDPR Cookie Compliance →
CVE-2026-16613
The GDPR Cookie Compliance WordPress plugin before 5.1.0 expires the visitor's cookies from an action that is reachable…
4.3
Moyenne
CVE-2025-1624
The GDPR Cookie Compliance WordPress plugin before 4.15.9 does not sanitise and escape some of its settings, which…
3.5
Faible
CVE-2025-1623
The GDPR Cookie Compliance WordPress plugin before 4.15.9 does not sanitise and escape some of its settings, which…
3.5
Faible
CVE-2025-1622
The GDPR Cookie Compliance WordPress plugin before 4.15.7 does not sanitise and escape some of its settings, which…
3.5
Faible