Medium severity6.5NVD Advisory· Published May 8, 2023· Updated Jun 17, 2026

CVE-2023-23894

Description

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Surbma Surbma | GDPR Proof Cookie Consent & Notice Bar plugin <= 17.5.3 versions.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Surbma/Gdpr Proof Cookie Consent \& Notice Bar
cpe:2.3:a:surbma:gdpr_proof_cookie_consent_\&_notice_bar:*:*:*:*:*:wordpress:*:*
Range: <17.6.0
WordPress/Surbma | GDPR Proof Cookie Consent & Notice Barllm-fuzzy
Range: <=17.5.3
Surbma/Surbma | GDPR Proof Cookie Consent & Notice Barv5
Range: n/a

Patches

Vulnerability mechanics

References

patchstack.com/database/vulnerability/surbma-gdpr-proof-google-analytics/wordpress-surbma-gdpr-proof-cookie-consent-notice-bar-plugin-17-5-3-cross-site-scripting-xss-vulnerabilitynvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000