Missed capabilities checks, leading to authenticated, stored cross-site scripting (XSS) and potentially privilege escalation.
This vulnerability affects the following application versions:
- CookieYes – Cookie Banner for Cookie Consent 1.6.6
- CookieYes – Cookie Banner for Cookie Consent 1.6.7
- CookieYes – Cookie Banner for Cookie Consent 1.6.8
- CookieYes – Cookie Banner for Cookie Consent 1.6.9
- CookieYes – Cookie Banner for Cookie Consent 1.6.10
- CookieYes – Cookie Banner for Cookie Consent 1.7.0
- CookieYes – Cookie Banner for Cookie Consent 1.7.1
- CookieYes – Cookie Banner for Cookie Consent 1.7.2
- CookieYes – Cookie Banner for Cookie Consent 1.7.3
- CookieYes – Cookie Banner for Cookie Consent 1.7.4
- CookieYes – Cookie Banner for Cookie Consent 1.7.5
- CookieYes – Cookie Banner for Cookie Consent 1.7.6
- CookieYes – Cookie Banner for Cookie Consent 1.7.7
- CookieYes – Cookie Banner for Cookie Consent 1.7.8
- CookieYes – Cookie Banner for Cookie Consent 1.7.9
- CookieYes – Cookie Banner for Cookie Consent 1.8.0
- CookieYes – Cookie Banner for Cookie Consent 1.8.1
- CookieYes – Cookie Banner for Cookie Consent 1.8.2