Cross-site Scripting Vulnerability in GDPR Info Cookie Notice & Consent Banner by GDPR & CCPA Compliance

CVE-2025-58607

What is CVE-2025-58607?

The GDPR Info Cookie Notice & Consent Banner for GDPR & CCPA Compliance suffers from a Cross-site Scripting (XSS) vulnerability due to inadequate input sanitization during web page generation. This flaw enables attackers to execute malicious scripts in the context of user's browsers, potentially leading to data theft and unauthorized access. The vulnerability affects versions of the product up to 1.7.11, highlighting the importance of applying relevant security updates to mitigate threats.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References