CVE-2023-24400: Hu-Manity Cookie Notice & Compliance For Gdpr / Ccpa

Medium severity, CVSS 5.4. EPSS: 0.4% chance of exploitation in the next 30 days.

Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in Hu-manity.Co Cookie Notice & Compliance for GDPR / CCPA plugin <= 2.4.6 versions.

Affected products

• Hu-Manity Cookie Notice & Compliance For Gdpr / Ccpa: before 2.4.7 (fixed in 2.4.7)

Published 2023-05-07. Last modified 2026-06-17.