cleantalk
Vulnerabilities and Security Researches

GDPR Cookie Compliance (CCPA, DSGVO, Cookie Consent), 5ac51325-a7f5-4d38-9b41-61855206083d

Published on
-
Research Description
GDPR Cookie Compliance &#8211; Cookie Banner, Cookie Consent, Cookie Notice for CCPA, EU Cookie Law [gdpr-cookie-compliance] < 4.0.3 GDPR Cookie Compliance &lt;= 4.0.2 - Authenticated Settings Reset The gdpr_cookie_compliance_reset_settings AJAX action registered for authenticated users lacks authorisation and CSRF checks, allowing unauthorised authenticated users to call it, which would result in the settings being reset.
Affected versions
max 4.0.3.
Status
vulnerable