CVE-2021-24590

CVE-2021-24590: Cookie Notice & Consent Banner for GDPR & CCPA Compliance < 1.7.2 - Authenticated Stored XSS

Vendor Unknown

Product Cookie Notice & Consent Banner for GDPR & CCPA Compliance

Weakness CWE-79 · XSS

Published September 6, 2021

Last update August 3, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The Cookie Notice & Consent Banner for GDPR & CCPA Compliance WordPress plugin before 1.7.2 does not properly sanitize inputs to prevent injection of arbitrary HTML within the plugin's design customization options.

Key dates

02Disclosure timeline

September 6, 2021 CVE published

August 3, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2021-24590 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/79.html