Test ID:	1.3.6.1.4.1.25623.1.0.147029
Category:	Web application abuses
Title:	WordPress Cookie Notice & Compliance for GDPR / CCPA Plugin < 2.1.2 XSS Vulnerability
Summary:	The WordPress plugin 'Cookie Notice & Compliance for GDPR / CCPA'; is prone to a cross-site scripting (XSS) vulnerability.
Description:	Summary: The WordPress plugin 'Cookie Notice & Compliance for GDPR / CCPA' is prone to a cross-site scripting (XSS) vulnerability. Vulnerability Insight: The plugin does not escape the value of its Button Text setting when outputting it in an attribute in the frontend, allowing high privilege users such as admin to perform Cross-Site Scripting even when the unfiltered_html capability is disallowed. Affected Software/OS: WordPress Cookie Notice & Compliance for GDPR / CCPA through version 2.1.1. Solution: Update to version 2.1.2 or later. CVSS Score: 3.5 CVSS Vector: AV:N/AC:M/Au:S/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2021-24569 https://wpscan.com/vulnerability/38053e05-4b17-4fa9-acd3-85d8529b202b
Copyright	Copyright (C) 2021 Greenbone Networks GmbH

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.