Vulnerabilities > Gdpr Extensions

DATE CVE VULNERABILITY TITLE RISK
2024-10-10 CVE-2024-9072 Cross-site Scripting vulnerability in Gdpr-Extensions Consent Manager
The GDPR-Extensions-com – Consent Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping.
network
low complexity
gdpr-extensions CWE-79
5.4