CVE-2023-39640: Uplight Cookie Law

Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days.

UpLight cookiebanner before 1.5.1 was discovered to contain a SQL injection vulnerability via the component Hook::getHookModuleExecList().

Affected products

• Uplight Cookie Law: before 1.5.1 (fixed in 1.5.1)

Published 2023-09-25. Last modified 2026-06-17.