CyberRota Analysis
AI-GeneratedThe WPLP Cookie Consent plugin for WordPress prior to version 4.4.4 is vulnerable due to improper escaping of user-submitted values, which can lead to cross-site scripting (XSS) attacks in multisite installations. This flaw allows unauthenticated users to execute arbitrary JavaScript in the context of an administrator's session, potentially compromising the site's security. WordPress administrators, particularly those managing multisite environments, should prioritize updating to the latest version to mitigate this risk.
Original NVD Description
The WPLP Cookie Consent WordPress plugin before 4.4.4 does not escape a value submitted through a public endpoint for the JavaScript context it is later output in on an administrative screen, allowing unauthenticated users to run arbitrary JavaScript in the session of an administrator who interacts with the logged entry. Only multisite installations are affected.