← back
CVE-2021-36889

WordPress tarteaucitron.js – Cookies legislation & GDPR plugin <= 1.6 - Multiple Stored Authenticated Cross-Site Scripting (XSS) vulnerabilities

CVSS 3.4 LOWEPSS 0.6%CWE-79
Vexday Risk Score
8Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 3.4EPSS 0.6%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
20 Dec 2021Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
Multiple Stored Authenticated Cross-Site Scripting (XSS) vulnerabilities were discovered in tarteaucitron.js – Cookies legislation & GDPR WordPress plugin (versions <= 1.6).
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:N/I:L/A:N
Affected products
Tarteaucitron · tarteaucitron.js – Cookies legislation & GDPR (WordPress plugin)

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://patchstack.com/database/vulnerability/tarteaucitronjs/wordpress-tarteaucitron-js-cookies-legislation-gdpr-plugin-1-6-multiple-stored-authenticated-cross-site-scripting-xss-vulnerabilitieshttps://wordpress.org/plugins/tarteaucitronjs/#developers