exploitDog

CVE-2025-1485

Опубликовано: 02 июн. 2025

Источник: nvd

CVSS3: 4.8

EPSS Низкий

Описание

The Real Cookie Banner: GDPR & ePrivacy Cookie Consent WordPress plugin before 5.1.6, real-cookie-banner-pro WordPress plugin before 5.1.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).

Ссылки

https://wpscan.com/vulnerability/0158eb67-cd36-4406-bf70-6f2be849ec52/
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:devowl:wordpress_real_cookie_banner:*:*:*:*:*:wordpress:*:*

Версия до 5.1.6 (исключая)

EPSS

Процентиль: 9%

0.00034

Низкий

4.8 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

GHSA-v8mm-64rg-m2wg

CVSS3: 4.8

github

8 месяцев назад

The Real Cookie Banner: GDPR & ePrivacy Cookie Consent WordPress plugin before 5.1.6, real-cookie-banner-pro WordPress plugin before 5.1.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).

EPSS

Процентиль: 9%

0.00034

Низкий

4.8 Medium

CVSS3

Дефекты

CWE-79