← All advisories

Medium severity6.1NVD Advisory· Published Aug 31, 2020· Updated Jun 17, 2026

CVE-2020-20628

CVE-2020-20628

Description

controller/controller-comments.php in WP GDPR plugin through 2.1.1 has unauthenticated stored XSS.

Affected products

2

WP GDPR plugin/WP GDPR plugindescription
WordPress/WP GDPR pluginllm-create
Range: <=2.1.1

Patches

Vulnerability mechanics

References

1

blog.nintechnet.com/unauthenticated-stored-xss-and-content-spoofing-vulnerabilities-in-wordpress-wp-gdpr-plugin-unpatched/nvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.