CVE-2020-20628: Appsaloon Wp-Gdpr

Medium severity, CVSS 6.1. EPSS: 0.9% chance of exploitation in the next 30 days.

controller/controller-comments.php in WP GDPR plugin through 2.1.1 has unauthenticated stored XSS.

Affected products

• Appsaloon Wp-Gdpr: version 2.1.1 only

Published 2020-08-31. Last modified 2026-06-17.