tarteaucitron.js – Cookies legislation & GDPR, CVE-2021-36887

CVE, Research URL: CVE-2021-36887
Home page URL: Security reports for tarteaucitron.js – Cookies legislation & GDPR
Application: tarteaucitron.js – Cookies legislation & GDPR
Published on: Dec 21, 2021
Research Description: Cross-Site Request Forgery (CSRF) vulnerability leading to Cross-Site Scripting (XSS) discovered in tarteaucitron.js – Cookies legislation & GDPR WordPress plugin (versions <= 1.5.4), vulnerable parameters "tarteaucitronEmail" and "tarteaucitronPass".
Affected versions: Min -, max 1.6.
Status: vulnerable

tarteaucitron.js &#8211; Cookies legislation &amp; GDPR, CVE-2021-36887