Stored Cross-Site Scripting in Beautiful Cookie Consent Banner for WordPress

CVE-2023-3388

What is CVE-2023-3388?

The Beautiful Cookie Consent Banner for WordPress suffers from a Stored Cross-Site Scripting vulnerability through the 'nsc_bar_content_href' parameter in versions up to and including 2.10.1. This flaw arises from the lack of adequate input sanitization and output escaping, enabling unauthenticated attackers to inject malicious scripts. When a user accesses an affected page, these arbitrary scripts can execute, potentially compromising user data and website integrity. While a partial patch was released in version 2.10.1, it was in 2.10.2 where the issue was fully patched, highlighting the importance of updating to the latest version to mitigate risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References