← All advisories

Medium severity5.9NVD Advisory· Published Oct 2, 2023· Updated Jun 17, 2026

CVE-2023-41800

CVE-2023-41800

Description

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in UniConsent UniConsent CMP for GDPR CPRA GPP TCF plugin <= 1.4.2 versions.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Uniconsent/Cmp For Gdpr Cpra Gpp Tcf2 versions
cpe:2.3:a:uniconsent:cmp_for_gdpr_cpra_gpp_tcf:*:*:*:*:*:wordpress:*:*+ 1 more
- cpe:2.3:a:uniconsent:cmp_for_gdpr_cpra_gpp_tcf:*:*:*:*:*:wordpress:*:*range: <=1.4.2
- (no CPE)range: n/a
WordPress/UniConsent CMP for GDPR CPRA GPP TCFllm-create
Range: <=1.4.2

Patches

Vulnerability mechanics

References

1

patchstack.com/database/vulnerability/uniconsent-cmp/wordpress-uniconsent-cookie-consent-cmp-for-gdpr-ccpa-plugin-1-4-2-cross-site-scripting-xssnvdThird Party Advisory

News mentions

0

No linked articles in our index yet.