Added check if user can manage options to prevent privilege escalation

Skrevet den af i CookieYes – Cookie Banner for Cookie Consent

Missed capabilities checks, leading to authenticated, stored cross-site scripting (XSS) and potentially privilege escalation.

This vulnerability affects the following application versions:

  • CookieYes – Cookie Banner for Cookie Consent 1.6.6
  • CookieYes – Cookie Banner for Cookie Consent 1.6.7
  • CookieYes – Cookie Banner for Cookie Consent 1.6.8
  • CookieYes – Cookie Banner for Cookie Consent 1.6.9
  • CookieYes – Cookie Banner for Cookie Consent 1.6.10
  • CookieYes – Cookie Banner for Cookie Consent 1.7.0
  • CookieYes – Cookie Banner for Cookie Consent 1.7.1
  • CookieYes – Cookie Banner for Cookie Consent 1.7.2
  • CookieYes – Cookie Banner for Cookie Consent 1.7.3
  • CookieYes – Cookie Banner for Cookie Consent 1.7.4
  • CookieYes – Cookie Banner for Cookie Consent 1.7.5
  • CookieYes – Cookie Banner for Cookie Consent 1.7.6
  • CookieYes – Cookie Banner for Cookie Consent 1.7.7
  • CookieYes – Cookie Banner for Cookie Consent 1.7.8
  • CookieYes – Cookie Banner for Cookie Consent 1.7.9
  • CookieYes – Cookie Banner for Cookie Consent 1.8.0
  • CookieYes – Cookie Banner for Cookie Consent 1.8.1
  • CookieYes – Cookie Banner for Cookie Consent 1.8.2