Skip to content
Threat Feed
Subscribe

Product

Cookie Banner for GDPR / CCPA – WPLP Cookie Consent (<= 4.4.1)

1 brief RSS
high advisory

Stored XSS in WPLP Cookie Consent Plugin for WordPress

An unauthenticated Stored Cross-Site Scripting (XSS) vulnerability in the WPLP Cookie Consent plugin (<= 4.4.1) allows attackers to inject arbitrary web scripts via the 'wpl_user_preference' parameter by leveraging a publicly exposed AJAX nonce.

Cookie Banner for GDPR / CCPA – WPLP Cookie Consent
2t 1c