Skip to content
Threat Feed
Subscribe

Vendor

Iubenda

1 brief RSS
high advisory

Stored Cross-Site Scripting in iubenda WordPress Plugin

The iubenda All-in-one Compliance for GDPR / CCPA Cookie Consent plugin for WordPress contains a stored XSS vulnerability in versions 3.13.4 and earlier, allowing unauthenticated attackers to inject malicious scripts when the Secondary parser engine is enabled.

All-in-one Compliance for GDPR / CCPA Cookie Consent + more web-vulnerability xss wordpress
2t 1c