Tarteaucitron Js Cookies Legislation Gdpr

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2021-36889 Dec 20, 21:15 MEDIUM This Month

Multiple Stored Authenticated Cross-Site Scripting (XSS) vulnerabilities were discovered in tarteaucitron.js - Cookies legislation & GDPR WordPress plugin (versions <= 1.6). Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS Wordpress Plugin Tarteaucitron Js Cookies Legislation Gdpr

NVD

CVSS 3.1

4.8

EPSS

0.6%

CVE-2021-36887 Dec 20, 21:15 HIGH POC This Week

Cross-Site Request Forgery (CSRF) vulnerability leading to Cross-Site Scripting (XSS) discovered in tarteaucitron.js - Cookies legislation & GDPR WordPress plugin (versions <= 1.5.4), vulnerable. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

WordPress XSS CSRF Wordpress Plugin Tarteaucitron Js Cookies Legislation Gdpr

NVD

CVSS 3.1

8.8

EPSS

0.5%

CVE-2021-36889

EPSS 1% CVSS 4.8

MEDIUM This Month

WordPress XSS Wordpress Plugin +1

NVD

CVE-2021-36887

EPSS 0% CVSS 8.8

HIGH POC This Week

WordPress XSS CSRF +2

NVD