Missed capabilities checks, leading to authenticated, stored cross-site scripting (XSS) and potentially privilege escalation.

This vulnerability affects the following application versions:

  • CookieYes – Cookie Banner for Cookie Consent 1.6.6
  • CookieYes – Cookie Banner for Cookie Consent 1.6.7
  • CookieYes – Cookie Banner for Cookie Consent 1.6.8
  • CookieYes – Cookie Banner for Cookie Consent 1.6.9
  • CookieYes – Cookie Banner for Cookie Consent 1.6.10
  • CookieYes – Cookie Banner for Cookie Consent 1.7.0
  • CookieYes – Cookie Banner for Cookie Consent 1.7.1
  • CookieYes – Cookie Banner for Cookie Consent 1.7.2
  • CookieYes – Cookie Banner for Cookie Consent 1.7.3
  • CookieYes – Cookie Banner for Cookie Consent 1.7.4
  • CookieYes – Cookie Banner for Cookie Consent 1.7.5
  • CookieYes – Cookie Banner for Cookie Consent 1.7.6
  • CookieYes – Cookie Banner for Cookie Consent 1.7.7
  • CookieYes – Cookie Banner for Cookie Consent 1.7.8
  • CookieYes – Cookie Banner for Cookie Consent 1.7.9
  • CookieYes – Cookie Banner for Cookie Consent 1.8.0
  • CookieYes – Cookie Banner for Cookie Consent 1.8.1
  • CookieYes – Cookie Banner for Cookie Consent 1.8.2

Skriv et svar

Din e-mailadresse vil ikke blive publiceret. Krævede felter er markeret med *