Stored Cross-Site Scripting Vulnerability in WP Cookie Consent Plugin

CVE-2024-4869

What is CVE-2024-4869?

The WP Cookie Consent plugin for WordPress is vulnerable to Stored Cross-Site Scripting, primarily through the manipulation of the 'Client-IP' header. This vulnerability exists in all versions up to and including 3.2.0 due to inadequate input sanitization and insufficient output escaping. Consequently, unauthenticated attackers can exploit this weakness to inject arbitrary web scripts into pages. These scripts can execute whenever a user accesses the compromised page, posing a significant threat to the security and integrity of the affected WordPress installations.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References