CVE-2023-6498

The Complianz – GDPR/CCPA Cookie Consent plugin before version 6.5.6 contains a stored cross-site scripting vulnerability in its administrative settings caused by inadequate sanitization of inputs and escaping of outputs. Attackers with administrator access or higher privileges can inject malicious scripts through the admin interface that will run when other users view affected pages, though this only impacts multisite WordPress installations or those where unfiltered_html has been restricted.

Based on public CVE data (MITRE/NVD).