Cpe:2.3:a:wplp:cookie_banner_for_gdpr_ccpa_wplp_cookie_consent:*:*:*:*:*:*:*:*

An unauthenticated Stored Cross-Site Scripting (XSS) vulnerability in the WPLP Cookie Consent plugin (<= 4.4.1) allows attackers to inject arbitrary web scripts via the 'wpl_user_preference' parameter by leveraging a publicly exposed AJAX nonce.