CVE-2021-36887: Tarteaucitron.js - Cookies Legislation & Gdpr Project Tarteaucitron.js - Cookies Legislation & Gdpr

High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days.

Cross-Site Request Forgery (CSRF) vulnerability leading to Cross-Site Scripting (XSS) discovered in tarteaucitron.js – Cookies legislation & GDPR WordPress plugin (versions <= 1.5.4), vulnerable parameters "tarteaucitronEmail" and "tarteaucitronPass".

Affected products

• Tarteaucitron.js - Cookies Legislation & Gdpr Project Tarteaucitron.js - Cookies Legislation & Gdpr: up to and including 1.5.4

Published 2021-12-20. Last modified 2026-06-17.