TI-2024-12870 CVE-2024-13849 · GHSA-2cxg-wgm8-g86mCookie Notice Bar <= 1.3.0 - Authenticated (Administrator+) Stored Cross-Site ScriptingPriority LOW 25The Cookie Notice Bar plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 1.3.0 due to insufficient input sanitization and output escaping.CVSS 3.1MEDIUM 5.5· Network · High privileges · No interaction · EPSS 0.00308 · Published 2025-02-20 · No fix listed CWE-79