Threats tagged 'ghsa-qp3p-7592-f8mv'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	7.2	CVE-2026-120540The iubenda \| All-in-one Compliance for GDPR / CCPA Cookie Consent + more plugin for WordPress is vulnerable to Stored High7.22026-11-07GCVE DatabaseCVE-2026-120540 The iubenda All-in-one Compliance plugin for WordPress versions up to and including 3.13.6 is vulnerable to a stored cross-site scripting (XSS) flaw. This vulnerability arises from improper handling of HTML comments inside IUB-COOKIE-BLOCK markers, allowing unauthenticated attackers to inject arbitrary scripts via moderated comments that execute when viewed by users after administrator approval. Report on CVE-2026-120540 Vulnerability CWE-79 #ghsa-qp3p-7592-f8mv	GCVE Database	2026-11-07

Page 1 of 1