CVE-2019-16522 | BDVDB-2026-124584 Detail

Description#

The eu-cookie-law plugin through 3.0.6 for WordPress (aka EU Cookie Law (GDPR)) is susceptible to Stored XSS due to improper encoding of several configuration options in the admin area and the displayed cookie consent message. This affects Font Color, Background Color, and the Disable Cookie text. An attacker with high privileges can attack other users.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://wordpress.org/plugins/eu-cookie-law/#developers
https://github.com/sbaresearch/advisories/tree/public/2019/SBA-ADV-20190913-01_WordPress_Plugin_EU_Cookie_Law
https://wpvulndb.com/vulnerabilities/9918

Exploit#

No public exploit known

History#

Version 12019-10-16Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.