CVE-2019-16522

The eu-cookie-law plugin through 3.0.6 for WordPress (aka EU Cookie Law (GDPR)) is susceptible to Stored XSS due to improper encoding of several configuration…

published October 16, 2019

CVSS
—
EPSS
1%
Percentile
63.5
In the wild
Unconfirmed
What it is

The eu-cookie-law plugin through 3.0.6 for WordPress (aka EU Cookie Law (GDPR)) is susceptible to Stored XSS due to improper encoding of several configuration options in the admin area and the displayed cookie consent message. This affects Font Color, Background Color, and the Disable Cookie text. An attacker with high privileges can attack other users.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01033 · 63.5th percentile
Published
2019-10-16T14:10Z
EPSS history
Timeline
  • 16 OCT 14:10Z
    The eu-cookie-law plugin through 3.0.6 for WordPress (aka EU Cookie Law (GDPR)) is susceptible to Stored XSS due to improper encoding of several configuration…
    cvelistv5