CVE-2021-25071: Inpsyde Akismet Privacy Policies

Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days.

The WordPress plugin through 2.0.1 does not sanitise and escape the translation parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting

Affected products

• Inpsyde Akismet Privacy Policies: up to and including 2.0.1

Published 2022-03-28. Last modified 2026-06-17.