Skip to content
Threat Feed
Subscribe

Vendor

Complianz

2 briefs RSS
high advisory

Stored Cross-Site Scripting in Complianz GDPR/CCPA Cookie Consent Banner

The Complianz GDPR/CCPA Cookie Consent Banner plugin for WordPress (<= 7.5.5) is vulnerable to Stored XSS due to improper input sanitization, allowing unauthenticated attackers to execute arbitrary scripts via comment content.

Complianz GDPR/CCPA Cookie Consent Banner web-application xss wordpress cve-2026-97339
2t 1c
high advisory

Stored XSS Vulnerability in Complianz WordPress Plugin

The Complianz GDPR/CCPA Cookie Consent Banner plugin is vulnerable to Stored Cross-Site Scripting (XSS) via the Elementor Cookie Blocker, allowing attackers to execute arbitrary JavaScript in the context of an administrator-approved comment.

Complianz GDPR/CCPA Cookie Consent Banner +1 wordpress xss web-application
2t 1c