Cross-site Scripting Vulnerability in Cookie Notice & Consent Plugin by Christophrado

CVE-2025-49390

What is CVE-2025-49390?

The Cookie Notice & Consent plugin by Christophrado is affected by a vulnerability that allows for stored Cross-site Scripting (XSS) attacks. This issue arises from improper input neutralization during web page generation, enabling attackers to inject malicious scripts. Any user visiting an affected site could potentially execute harmful scripts unknowingly. All versions up to and including 1.6.4 are susceptible to exploitation, emphasizing the need for immediate updates to secure user interactions.

References