CVE-2021-36889: Tarteaucitron.js - Cookies Legislation & Gdpr Project Tarteaucitron.js - Cookies Legislation & Gdpr

Medium severity, CVSS 4.8. EPSS: 0.6% chance of exploitation in the next 30 days.

Multiple Stored Authenticated Cross-Site Scripting (XSS) vulnerabilities were discovered in tarteaucitron.js – Cookies legislation & GDPR WordPress plugin (versions <= 1.6).

Affected products

• Tarteaucitron.js - Cookies Legislation & Gdpr Project Tarteaucitron.js - Cookies Legislation & Gdpr: before 1.6.1 (fixed in 1.6.1)

Published 2021-12-20. Last modified 2026-06-17.