CVE-2020-12742: Iubenda Iubenda-Cookie-Law-Solution

Medium severity, CVSS 6.1. EPSS: 1.1% chance of exploitation in the next 30 days.

The iubenda-cookie-law-solution plugin before 2.3.5 for WordPress does not restrict URL sanitization to http protocols.

Affected products

• Iubenda Iubenda-Cookie-Law-Solution: before 2.3.5 (fixed in 2.3.5)

Published 2020-05-13. Last modified 2026-06-17.