Advisories · Technology
iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more.
Every CVE that names iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.2 High
iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more <= 3.13.6 - Unauthenticated Stored Cross-Site Scripting via Comment Content via IUB-COOKIE-BLOCK Marker
- iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more
- Cross-site scripting (XSS)
- CVSS 7.5 High
iubenda < 3.13.7 - Unauthenticated Stored XSS via Cookie Block HTML Parser
- iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more
- Cross-site scripting (XSS)
- CVSS 7.2 High
iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more <= 3.13.4 - Unauthenticated Stored Cross-Site Scripting via Comment Content
- iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more
- Cross-site scripting (XSS)
- CVSS 7.2 High
iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more <= 3.13.4 - Unauthenticated Stored Cross-Site Scripting via Comment Content via AdSense Regex Rewrite
- iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more
- Cross-site scripting (XSS)
- CVSS 8.8 High
iubenda < 3.3.3 - Subscriber+ Privileges Escalation to Admin
- iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more