CVE-2019-16522

MEDIUM 4.8CVE-2019-16522 · Published 16/10/2019 · updated 17/06/2026

In short

CVE-2019-16522 is a MEDIUM (CVSS 4.8) vulnerability affecting eu cookie law (eu cookie law project).
Chance of exploitation in the next 30 days (EPSS): 1.0%, higher than 64.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
eu cookie law eu_cookie_law_project	`≤ 3.0.6`	No fix yet

Description

The eu-cookie-law plugin through 3.0.6 for WordPress (aka EU Cookie Law (GDPR)) is susceptible to Stored XSS due to improper encoding of several configuration options in the admin area and the displayed cookie consent message. This affects Font Color, Background Color, and the Disable Cookie text. An attacker with high privileges can attack other users.

References

sbaresearch/advisories · Exploit
wordpress.org/plugins/eu-cookie-law · Product
wpvulndb.com/vulnerabilities/9918 · Third Party Advisory

More vulnerabilities in eu cookie law

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free