CVE-2025-1623
CVSS 3.1 Score 3.5 of 10 (low)
Details
Published Mar 16, 2025
Updated: Apr 2, 2025
CWE ID 79
Summary
CVE-2025-1623 is a vulnerability affecting the GDPR Cookie Compliance WordPress plugin before version 4.15.9. The issue lies in the plugin's lack of sanitization and escaping of certain settings. This flaw enables high privilege users, such as admins, to execute Stored Cross-Site Scripting (XSS) attacks, even when the unfiltered_html capability is restricted, making multisite setups vulnerable.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.