CVE-2023-49191: WordPress GDPR Cookie Consent by Supsystic Plugin <= 2.1.2 is vulnerable to Cross Site Scripting (XSS)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Supsystic GDPR Cookie Consent by Supsystic allows Stored XSS.This issue affects GDPR Cookie Consent by Supsystic: from n/a through 2.1.2.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-49191?
CVE-2023-49191 is a stored XSS vulnerability that can allow attackers to inject malicious scripts into web pages.
Which versions of Supsystic GDPR Cookie Consent are affected by CVE-2023-49191?
CVE-2023-49191 affects versions of Supsystic GDPR Cookie Consent up to and including version 2.1.2.
How do I fix CVE-2023-49191?
To fix CVE-2023-49191, update the Supsystic GDPR Cookie Consent plugin to a later version that has patched the vulnerability.
What type of vulnerability is CVE-2023-49191?
CVE-2023-49191 is classified as a Cross-site Scripting (XSS) vulnerability.
What could happen if CVE-2023-49191 is exploited?
If CVE-2023-49191 is exploited, attackers could execute malicious scripts in unsuspecting users' browsers, potentially leading to data theft or session hijacking.