CVE-2021-24653
25.10.2021, 14:15
The Cookie Bar WordPress plugin before 1.8.9 doesn't properly sanitise the Cookie Bar Message setting, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
| Vendor | Product | Version |
|---|---|---|
| cookie-bar_project | cookie-bar | 𝑥 < 1.8.9 |
𝑥
= Vulnerable software versions