Read the docs

Eu Cookie Law Project

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Eu Cookie Law Project records in CISA KEV

No Eu Cookie Law Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

2 records in Eu Cookie Law · all components

TI-2022-03491 CVE-2022-3811 · GHSA-92hc-53p9-368j

EU Cookie Law <= 3.1.6 - Admin+ Stored XSS

Priority MEDIUM 55

The EU Cookie Law for GDPR/CCPA WordPress plugin through 3.1.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even w…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00475 Published 2023-01-23 No fix listed
Priority LOW 24

The eu-cookie-law plugin through 3.0.6 for WordPress (aka EU Cookie Law (GDPR)) is susceptible to Stored XSS due to improper encoding of several configuration options in the admin area and the displayed cookie consent me…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.01033 Published 2019-10-16 No fix listed CWE-79
Open these records in search →