Tag

Cve-2026-120540

1 brief RSS

iubenda All-in-one Compliance: Stored Cross-Site Scripting (CVE-2026-120540)

The iubenda All-in-one Compliance plugin for WordPress up to version 3.13.6 is vulnerable to stored Cross-Site Scripting (XSS) due to insecure re-processing of HTML comments by its bundled simple_html_dom parser.

All-in-one Compliance for GDPR / CCPA Cookie Consent + more wordpress xss web-application cve-2026-120540

1t 1c 11h ago