Exploit for Cookie Notice & Consent Banner for GDPR & CCPA Compliance < 1.7.2 - Authenticated Stored XSS CVE-2021-24590

Name: Exploit for Cookie Notice & Consent Banner for GDPR & CCPA Compliance < 1.7.2 - Authenticated Stored XSS CVE-2021-24590
Rating: 5 (308 reviews)

2021-08-06 | CVSS 3.5

## https://sploitus.com/exploit?id=WPEX-ID:D6846774-1958-4C8D-BB64-AF0D8C46E6E7
Go to the plugin's Customize Design page and open the "Wizard menu". Now scroll down and you will find an "Info Text" field where you can inject an XSS payload like "<details open ontoggle=confirm()>". Click "Publish" to store the payload.