CVE-2025-24591: Ninjateam Gdpr Ccpa Compliance & Cookie Consent Banner

High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days.

Missing Authorization vulnerability in Ninja Team GDPR CCPA Compliance Support ninja-gdpr-compliance allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GDPR CCPA Compliance Support: from n/a through <= 2.7.1.

Affected products

• Ninjateam Gdpr Ccpa Compliance & Cookie Consent Banner: before 2.7.2 (fixed in 2.7.2)

Published 2025-01-24. Last modified 2026-06-17.