Cookie Bar

cookie-bar

Vendor: Cookie Bar Project • 1 CVE

CVEs (1)

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2021-24653

1Cookie Bar Project

1Cookie Bar

Jun 17, 2026

Oct 25, 2021

N/A· v4

4.8 MEDIUM· v3

3.5 LOW· v2

The Cookie Bar WordPress plugin before 1.8.9 doesn't properly sanitise the Cookie Bar Message setting, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capabili...Show more