{"id":"CVE-2021-24590","aliases":["EUVD-2021-11502","GHSA-jghc-2mp4-x4fj"],"status":"published","title":"Cookie Notice \u0026 Consent Banner for GDPR \u0026 CCPA Compliance \u003c 1.7.2 - Authenticated Stored XSS","description":"The Cookie Notice \u0026 Consent Banner for GDPR \u0026 CCPA Compliance WordPress plugin before 1.7.2 does not properly sanitize inputs to prevent injection of arbitrary HTML within the plugin's design customization options.","severity":{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-12","score":0.00624,"percentile":0.50447,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-79"],"published":"2021-09-06T11:09:29Z","modified":"2026-06-17T03:40:17Z","products":[{"vendor":"gdprinfo","product":"cookie_notice_\\\u0026_consent_banner_for_gdpr_\\\u0026_ccpa_compliance"},{"vendor":"unknown","product":"cookie notice \u0026 consent banner for gdpr \u0026 ccpa compliance"}],"references":[{"url":"https://wpscan.com/vulnerability/d6846774-1958-4c8d-bb64-af0d8c46e6e7","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-24590"},{"url":"https://github.com/advisories/GHSA-jghc-2mp4-x4fj"}],"sources":{"cve":[{"id":"CVE-2021-24590","title":"Cookie Notice \u0026 Consent Banner for GDPR \u0026 CCPA Compliance \u003c 1.7.2 - Authenticated Stored XSS","description":"The Cookie Notice \u0026 Consent Banner for GDPR \u0026 CCPA Compliance WordPress plugin before 1.7.2 does not properly sanitize inputs to prevent injection of arbitrary HTML within the plugin's design customization options.","status":"published","published":"2021-09-06T11:09:29Z","modified":"2024-08-03T19:35:20.251Z","cwes":["CWE-79"],"updated_at":"2026-11-02T14:33:05.000797Z"}],"euvd":[{"id":"EUVD-2021-11502","description":"The Cookie Notice \u0026 Consent Banner for GDPR \u0026 CCPA Compliance WordPress plugin before 1.7.2 does not properly sanitize inputs to prevent injection of arbitrary HTML within the plugin's design customization options.","status":"published","published":"2021-09-06T11:09:29Z","modified":"2024-08-03T19:35:20Z","updated_at":"2026-11-03T03:24:56.857735Z"}],"ghsa":[{"id":"GHSA-jghc-2mp4-x4fj","title":"The Cookie Notice \u0026 Consent Banner for GDPR \u0026 CCPA Compliance WordPress plugin before 1.7.2 does...","description":"The Cookie Notice \u0026 Consent Banner for GDPR \u0026 CCPA Compliance WordPress plugin before 1.7.2 does not properly sanitize inputs to prevent injection of arbitrary HTML within the plugin's design customization options.","status":"published","published":"2022-05-24T19:13:04Z","modified":"2023-01-30T05:01:54Z","cwes":["CWE-79"],"updated_at":"2026-11-02T14:46:30.744651Z"}],"nvd":[{"id":"CVE-2021-24590","description":"The Cookie Notice \u0026 Consent Banner for GDPR \u0026 CCPA Compliance WordPress plugin before 1.7.2 does not properly sanitize inputs to prevent injection of arbitrary HTML within the plugin's design customization options.","status":"published","published":"2021-09-06T11:15:08.413Z","modified":"2026-06-17T03:40:17.393Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":3.5,"vector":"AV:N/AC:M/Au:S/C:N/I:P/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:06:58.05696Z"}]}}