CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in themebeez Simple GDPR Cookie Compliance simple-gdpr-cookie-compliance allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple GDPR Cookie Compliance: from n/a through <= 2.0.0.
Explanation of Vulnerability in Simple Terms
Simple GDPR Cookie Compliance versions 2.0.0 and earlier lack proper authorization checks, allowing unauthenticated attackers to modify cookie compliance settings or data. The vulnerability requires no user interaction and can be exploited over the network. Site administrators should update to a version newer than 2.0.0 to restore proper access controls.
What an attacker can do
Modify cookie compliance settings or data without authentication.
Potential impact on your site
Cookie consent settings could be altered by unauthorized parties, potentially exposing visitor privacy.
Conditions required to exploit
Network access to the site; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
