Eu Cookie Law Project Eu Cookie Law — known CVE vulnerabilities

Every CVE whose affected-product data names Eu Cookie Law Project Eu Cookie Law, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2019-16522 — CVSS 4.8 (medium): The eu-cookie-law plugin through 3.0.6 for WordPress (aka EU Cookie Law (GDPR)) is susceptible to Stored XSS due to improper encoding of…
• CVE-2022-3811 — CVSS 4.8 (medium): The EU Cookie Law for GDPR/CCPA WordPress plugin through 3.1.6 does not sanitise and escape some of its settings, which could allow high…