CVE-2025-23434

Name of the Vulnerable Software and Affected Versions Easy EU Cookie law versions n/a through 1.3.3.1

Description The issue is related to improper neutralization of input during web page generation, also known as Cross-site Scripting (XSS). This allows for Stored XSS attacks.

Recommendations For versions n/a through 1.3.3.1, update to a version later than 1.3.3.1 to resolve the issue. As a temporary workaround, consider restricting user input to minimize the risk of exploitation. Avoid using potentially vulnerable input fields in the affected web page generation until the issue is resolved.