Medium severity5.4NVD Advisory· Published Aug 21, 2020· Updated Jun 17, 2026

CVE-2020-20633

Description

ajax_policy_generator in admin/modules/cli-policy-generator/classes/class-policy-generator-ajax.php in GDPR Cookie Consent (cookie-law-info) 1.8.2 and below plugin for WordPress, allows authenticated stored XSS and privilege escalation.

Affected products

WordPress/GDPR Cookie Consent (cookie-law-info) plugindescription
WordPress/Gdpr Cookie Consentllm-fuzzy
Range: <=1.8.2
Package: https://wordpress.org/plugins/gdpr-cookie-consent

Patches

Vulnerability mechanics

References

blog.nintechnet.com/wordpress-gdpr-cookie-consent-plugin-fixed-vulnerability/nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.351
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000