https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-13T19:22:26.927105+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-86606 CVE-2026-86606 — iubenda < 3.13.7 - Unauthenticated Stored XSS via Cookie Block HTML Parser 2026-11-13T19:22:26.927823+00:00

Affected: Unknown iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more

The iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more WordPress plugin before 3.13.7 does not properly escape content it re-emits through its bundled HTML parser, allowing unauthenticated users to inject arbitrary web scripts in pages that will execute in the session of any visitor viewing them, including logged in administrators.