CVE-2022-0147

MEDIO 6.1CVE-2022-0147 · Published 14/03/2022 · updated 17/06/2026

In breve

CVE-2022-0147 è una vulnerabilità MEDIO (CVSS 6.1) che riguarda wp-gdpr-compliance (cookieinformation).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.6%, superiore al 75.3% delle vulnerabilità.
Correzione: aggiornare a 2.0.8 o successiva.

Package	Affected versions	Patched versions
wp-gdpr-compliance cookieinformation	`< 2.0.8`	`2.0.8`

Description

The Cookie Information | Free GDPR Consent Solution WordPress plugin before 2.0.8 does not escape user data before outputting it back in attributes in the admin dashboard, leading to a Reflected Cross-Site Scripting issue

References

plugins.trac.wordpress.org/changeset/2681371 · Patch
wpscan.com/vulnerability/2c735365-69c0-4652-b48e-c4a192dfe0d1 · Exploit

Altre vulnerabilità di wp-gdpr-compliance

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free