Beautiful Cookie Consent Banner, d2a445136d1a6be962e15c0f78eb6c325db3e7c4

CVE, Research URL: d2a445136d1a6be962e15c0f78eb6c325db3e7c4
Home page URL: Security reports for Beautiful Cookie Consent Banner
Application: Beautiful Cookie Consent Banner
Published on: Jan 31, 2023
Research Description: Beautiful Cookie Consent Banner [beautiful-and-responsive-cookie-consent] < 2.10.1 Beautiful Cookie Consent Banner <= 2.10.0 - Missing Authorization to Settings Update The Beautiful Cookie Consent Banner plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the nsc_bar_save_submitted_form_fields() function called via and admin_init hook in versions up to, and including, 2.10.0. This makes it possible for unauthenticated attackers to modify the plugin's settings and inject malicious web scripts. Please note this is still vulnerable to Cross-Site Request Forgery attacks.
Affected versions: max 2.10.1.
Status: vulnerable