Tarteaucitron

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Tarteaucitron records in CISA KEV

No Tarteaucitron vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Tarteaucitron 1 record MEDIUM

Records

3 records

TI-2023-03379 CVE-2023-3620 · GHSA-f44m-65h3-99vc

Cross-site Scripting (XSS) - Stored in amauric/tarteaucitron.js

MEDIUM 58

Cross-site Scripting (XSS) - Stored in GitHub repository amauric/tarteaucitron.js prior to v1.13.1.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00542 Published 2023-07-11 Fixed in v1.13.1, 1.13.1 CWE-79

TI-2021-14976 CVE-2021-36887 · GHSA-w9q6-vv8m-4f39

Cross-site request forgery in tarteaucitron.js – Cookies legislation & GDPR

LOW 39

Cross-Site Request Forgery (CSRF) vulnerability leading to Cross-Site Scripting (XSS) discovered in tarteaucitron.js – Cookies legislation & GDPR WordPress plugin (versions <= 1.5.4), vulnerable parameters "tarteaucitron…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00508 Published 2021-12-20 No fix listed CWE-352

TI-2021-14978 CVE-2021-36889 · GHSA-h2mr-r867-cxv6

Cross-site scripting in tarteaucitron.js – Cookies legislation & GDPR

LOW 23

Multiple Stored Authenticated Cross-Site Scripting (XSS) vulnerabilities were discovered in tarteaucitron.js – Cookies legislation & GDPR WordPress plugin (versions <= 1.6).

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00583 Published 2021-12-20 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	2
Low	0
No CVSS	0