CVE-2020-20628

Impact

controller/controller-comments.php in WP GDPR plugin through 2.1.1 has unauthenticated stored XSS.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• https://blog.nintechnet.com/unauthenticated-stored-xss-and-content-spoofing-vulnerabilities-in-wordpress-wp-gdpr-plugin-unpatched/
• https://blog.nintechnet.com/unauthenticated-stored-xss-and-content-spoofing-vulnerabilities-in-wordpress-wp-gdpr-plugin-unpatched/