Threats tagged 'ghsa-m4rm-wx2r-5mjr'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	6.4	CVE-2025-11186The Cookie Notice & Compliance for GDPR / CCPA plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Medium6.42025-11-22GCVE DatabaseCVE-2025-11186 The Cookie Notice & Compliance for GDPR / CCPA WordPress plugin up to version 2.5.8 contains a stored cross-site scripting (XSS) vulnerability. This flaw arises from insufficient sanitization and escaping of user-supplied attributes in the cookies_accepted shortcode. Authenticated users with contributor-level or higher privileges can inject malicious scripts that execute when other users view the affected pages. Report on CVE-2025-11186 Vulnerability CWE-79 #ghsa-m4rm-wx2r-5mjr	GCVE Database	2025-11-22

Page 1 of 1