Vulnerabilities

TI-2023-03168 CVE-2023-3388 · GHSA-mc5q-54j2-f34q

Beautiful Cookie Consent Banner <= 2.10.1 - Unauthenticated Stored Cross-Site Scripting

HIGH 79

The Beautiful Cookie Consent Banner for WordPress is vulnerable to Stored Cross-Site Scripting via the 'nsc_bar_content_href' parameter in versions up to, and including, 2.10.1 due to insufficient input sanitization and…

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.84341 Published 2023-06-24 No fix listed CWE-79

TI-2022-03503 CVE-2022-3823 · GHSA-4mqw-j6gr-pfr9

Beautiful Cookie Consent Banner < 2.9.1 - Admin+ Stored XSS

MEDIUM 55

The Beautiful Cookie Consent Banner WordPress plugin before 2.9.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks eve…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00518 Published 2022-11-28 Fixed in 2.9.1

Vulnerabilities

Filters

Beautiful Cookie Consent Banner <= 2.10.1 - Unauthenticated Stored Cross-Site Scripting

Beautiful Cookie Consent Banner < 2.9.1 - Admin+ Stored XSS