Cookie Law Bar
Approved changes feed: RSS · Atom
cpe:2.3:a:cookielawinfo:cookie_law_bar:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Cookielawinfo (6ac84ae7-7e09-52c5-b327-f8f76f8ff06f) |
|---|---|
| Product | Cookie Law Bar (f283042e-b110-5abc-85f9-243a9467403a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-47957 |
vulnerable | 2026-06-08 05:38:07.989834 |
WordPress Plugin Cookie Law Bar 1.2.1 Stored XSS via clb_bar_msg
MEDIUM (6.4)
Cookie Law Bar 1.2.1 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by submitting unsanitized input to the Bar Message field. Attackers can inject script payloads through the plugin settings page that execute in the browsers of all WordPress users viewing the site, enabling cookie theft and sensitive data exfiltration.
Published: 2026-05-16T15:26:09.379Z
Updated: 2026-05-24T01:37:14.399Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.