CVE · Medium
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2022-0193 | Complianz GDPR/CCPA Cookie Consent Banner [complianz-gdpr] < 6.0.0 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.1 | < 6.0.0 | 6.0.0 | 2022-01-17 | — |
The Complianz – GDPR/CCPA Cookie Consent plugin versions prior to 6.0.0 contain a reflected cross-site scripting vulnerability in an admin page where the s parameter is output into an HTML attribute without proper escaping, allowing attackers to inject malicious scripts.
Based on public CVE data (MITRE/NVD).
No signup, no credit card — enter your URL and get a security report in seconds.