wordpress_real_cookie_banner Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/wordpress_real_cookie_banner/ Thu, 23 Feb 2023 05:21:23 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png wordpress_real_cookie_banner Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/wordpress_real_cookie_banner/ 32 32 CVE-2022-4507 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-4507/ Thu, 23 Feb 2023 05:21:23 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-4507/ The Real Cookie Banner WordPress plugin before 3.4.10 does not validate and escapes some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as a contributor to perform Stored Cross-Site Scripting attacks against logged-in admins.

The post CVE-2022-4507 appeared first on CVE Vulnerability.

]]> The Real Cookie Banner WordPress plugin before 3.4.10 does not validate and escapes some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as a contributor to perform Stored Cross-Site Scripting attacks against logged-in admins.

The post CVE-2022-4507 appeared first on CVE Vulnerability.

]]> CVE-2022-0445 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-0445/ Thu, 23 Feb 2023 05:01:52 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-0445/ The WordPress Real Cookie Banner: GDPR (DSGVO) & ePrivacy Cookie Consent WordPress plugin before 2.14.2 does not have CSRF checks in place when resetting its settings, allowing attackers to make a logged in admin reset them via a CSRF attack

The post CVE-2022-0445 appeared first on CVE Vulnerability.

]]> The WordPress Real Cookie Banner: GDPR (DSGVO) & ePrivacy Cookie Consent WordPress plugin before 2.14.2 does not have CSRF checks in place when resetting its settings, allowing attackers to make a logged in admin reset them via a CSRF attack

The post CVE-2022-0445 appeared first on CVE Vulnerability.

]]>