Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Tarteaucitron.js - Cookies Legislation & Gdpr Project Clear all filters
TI-2021-14976 CVE-2021-36887 · GHSA-w9q6-vv8m-4f39

Cross-site request forgery in tarteaucitron.js – Cookies legislation & GDPR

Priority LOW 39

Cross-Site Request Forgery (CSRF) vulnerability leading to Cross-Site Scripting (XSS) discovered in tarteaucitron.js – Cookies legislation & GDPR WordPress plugin (versions <= 1.5.4), vulnerable parameters "tarteaucitron…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00508 Published 2021-12-20 No fix listed CWE-352
TI-2021-14978 CVE-2021-36889 · GHSA-h2mr-r867-cxv6

Cross-site scripting in tarteaucitron.js – Cookies legislation & GDPR

Priority LOW 23

Multiple Stored Authenticated Cross-Site Scripting (XSS) vulnerabilities were discovered in tarteaucitron.js – Cookies legislation & GDPR WordPress plugin (versions <= 1.6).

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00583 Published 2021-12-20 No fix listed CWE-79