Skip to content
Threat Feed
Subscribe

Product

All-in-One Compliance for GDPR / CCPA Cookie Consent + More (<= 3.13.6)

1 brief RSS
high advisory

iubenda All-in-one Compliance: Stored Cross-Site Scripting (CVE-2026-120540)

The iubenda All-in-one Compliance plugin for WordPress up to version 3.13.6 is vulnerable to stored Cross-Site Scripting (XSS) due to insecure re-processing of HTML comments by its bundled simple_html_dom parser.

All-in-one Compliance for GDPR / CCPA Cookie Consent + more wordpress xss web-application cve-2026-120540
1t 1c