CVE-2021-36889

State: PUBLISHED · Published: 2021-12-20 · Updated: 2025-03-28 · Assigner: Patchstack

Description

Multiple Stored Authenticated Cross-Site Scripting (XSS) vulnerabilities were discovered in tarteaucitron.js – Cookies legislation & GDPR WordPress plugin (versions <= 1.6).

CWE

CWE-79 — CWE-79 Cross-site Scripting (XSS)

Affected

Tarteaucitron / tarteaucitron.js – Cookies legislation & GDPR (WordPress plugin) — v=<= 1.6 ≤1.6 [affected]

CVSS

3.1 score=3.4 severity=LOW CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:N/I:L/A:N

References

https://wordpress.org/plugins/tarteaucitronjs/#developers x_refsource_CONFIRM
https://patchstack.com/database/vulnerability/tarteaucitronjs/wordpress-tarteaucitron-js-cookies-legislation-gdpr-plugin-1-6-multiple-stored-authenticated-cross-site-scripting-xss-vulnerabilities x_refsource_MISC

Source

cvelistV5-main/cves/2021/36xxx/CVE-2021-36889.json