Description (CNA)
Cross-Site Request Forgery (CSRF) vulnerability leading to Cross-Site Scripting (XSS) discovered in tarteaucitron.js – Cookies legislation & GDPR WordPress plugin (versions <= 1.5.4), vulnerable parameters "tarteaucitronEmail" and "tarteaucitronPass".
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Tarteaucitron / tarteaucitron.js – Cookies legislation & GDPR (WordPress plugin) | affected <= 1.5.4 through 1.5.4 |
CWE
CWE-352, CWE-79
References
- https://wordpress.org/plugins/tarteaucitronjs/#developers
- https://patchstack.com/database/vulnerability/tarteaucitronjs/wordpress-tarteaucitron-js-cookies-legislation-gdpr-plugin-1-5-4-cross-site-request-forgery-csrf-vulnerability-leading-to-cross-site-scripting-xss
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.