Medium severity4.8NVD Advisory· Published Sep 27, 2021· Updated Jun 17, 2026
CVE-2021-24569
CVE-2021-24569
Description
The Cookie Notice & Compliance for GDPR / CCPA WordPress plugin before 2.1.2 does not escape the value of its Button Text setting when outputting it in an attribute in the frontend, allowing high privilege users such as admin to perform Cross-Site Scripting even when the unfiltered_html capability is disallowed.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- WordPress/Cookie Notice & Compliance for GDPR / CCPAdescription
- Range: <2.1.2
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/38053e05-4b17-4fa9-acd3-85d8529b202bnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.