Input validation vulnerability in Complianz – GDPR/CCPA Cookie Consent 6.4.1

The Complianz – GDPR/CCPA Cookie Consent plugin for WordPress has a security issue in versions up to and including 6.4.1. An attacker with contributor-level permission or higher can inject malicious code into pages that will run when someone visits the injected page. The vulnerability exists because the plugin does not adequately check user inputs or prevent them from being put into pages.