Input validation vulnerability in Cookie banner plugin for WordPress – Cookiebot CMP by Usercentrics 3.6.1

The Cookiebot plugin for WordPress, which is used to make a website compliant with the GDPR and CCPA regulations, is vulnerable to a type of attack called Reflected Cross-Site Scripting. This type of attack allows an unauthenticated attacker to inject malicious code into the website’s administrative pages, which can be executed if the administrator clicks a link. Versions of the plugin up to and including 3.6.0 are affected.