← Database

CVE-2021-36887

MEDIUM CVSS: 6.1 Published: 2021-12-20 Modified: 2026-06-17

Description

Cross-Site Request Forgery (CSRF) vulnerability leading to Cross-Site Scripting (XSS) discovered in tarteaucitron.js – Cookies legislation & GDPR WordPress plugin (versions <= 1.5.4), vulnerable parameters "tarteaucitronEmail" and "tarteaucitronPass".

Affected Platforms

Tarteaucitron.Js - Cookies Legislation \& Gdpr Project Tarteaucitron.Js - Cookies Legislation \& Gdpr

Weakness Type

CWE-79, CWE-352, CWE-352

References