cleantalk
Vulnerabilities and Security Researches

Cookie Notice & Consent, CVE-2025-49390

CVE, Research URL

CVE-2025-49390

Published on
Nov 06, 2025
Research Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in christophrado Cookie Notice & Consent cookie-notice-consent allows Stored XSS.This issue affects Cookie Notice & Consent: from n/a through <= 1.6.4.
Affected versions
max 1.6.4.
Status
vulnerable