CVE-2023-24400

Name of the Vulnerable Software and Affected Versions Hu-manity.Co Cookie Notice & Compliance for GDPR / CCPA plugin versions <= 2.4.6

Description The issue is related to an Authenticated Cross-Site Scripting (XSS) vulnerability. This type of vulnerability allows an attacker to inject malicious scripts into a website, potentially leading to unauthorized actions on behalf of the user.

Recommendations For Hu-manity.Co Cookie Notice & Compliance for GDPR / CCPA plugin versions <= 2.4.6, update to a version higher than 2.4.6 to resolve the issue. At the moment, there is no information about additional mitigation measures for this specific vulnerability.