Product

All-in-One Compliance for GDPR / CCPA Cookie Consent + More (<= 3.13.4)

1 brief RSS

Stored Cross-Site Scripting in iubenda WordPress Plugin

The iubenda All-in-one Compliance for GDPR / CCPA Cookie Consent plugin for WordPress contains a stored XSS vulnerability in versions 3.13.4 and earlier, allowing unauthenticated attackers to inject malicious scripts when the Secondary parser engine is enabled.

All-in-one Compliance for GDPR / CCPA Cookie Consent + more web-vulnerability xss wordpress

2t 1c 2h ago