Unknown Complianz – Gdpr/Ccpa Cookie Consent vulnerabilities

2 vulnerabilities

Known vulnerabilities in Unknown Complianz – Gdpr/Ccpa Cookie Consent, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

MediumCVE-2022-0193really-simple-plugins · complianz +2 more4y agoComplianz - GDPR/CCPA Cookie Consent < 6.0.0 - Reflected Cross-Site ScriptingThe Complianz WordPress plugin before 6.0.0 does not escape the s parameter before outputting it back in an attribute in an admin page, leading to a Reflected Cross-Site ScriptingEPSS0.88%HighCVE-2022-3494really-simple-plugins · complianz +4 more3y agoComplianz (Free < 6.3.4, Premium < 6.3.6) - Translator SQLiThe Complianz WordPress plugin before 6.3.4, and Complianz Premium WordPress plugin before 6.3.6 allow a translators to inject arbitrary SQL through an unsanitized translation. SQL can be injected through an infected translation file, or by a user with a translator role through translation plugins such as Loco Translate or WPML.EPSS1.32%