CVE-2021-36889
Multiple Stored Authenticated Cross-Site Scripting (XSS) vulnerabilities were discovered in tarteaucitron.js – Cookies legislation & GDPR WordPress plugin (versions <= 1.6).
- Score
- CVSS 3.1 4.8 Medium
- Status
- Modified - audit@patchstack.com
- Published
- 2021-12-20
- Last modified
- 2026-04-28
- Weaknesses
- CWE-79
Affected products
- Tarteaucitron.js Cookies Legislation Gdpr Wordpress Plugin (Tarteaucitron)
- Tarteaucitron.js - Cookies Legislation & Gdpr (Tarteaucitron.js - Cookies Legislation & Gdpr Project)
References
- https://patchstack.com/database/vulnerability/tarteaucitronjs/wordpress-tarteaucitron-js-cookies-legislation-gdpr-plugi…
- https://wordpress.org/plugins/tarteaucitronjs/#developers
