PT-2026-41454 · Cookielawinfo · Cookie Law Bar

Mesut Cetin · Published 2026-05-16 · Updated 2026-05-16 · CVE-2021-47957

Mitre

CVSS v3.1

6.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

Cookie Law Bar 1.2.1 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by submitting unsanitized input to the Bar Message field. Attackers can inject script payloads through the plugin settings page that execute in the browsers of all WordPress users viewing the site, enabling cookie theft and sensitive data exfiltration.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2021-47957

Affected Products

Cookie Law Bar

References · 5

• 🔥 https://exploit-db.com/exploits/49905 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-47957 · Security Note
• https://wordpress.org/plugins/cookie-law-bar · Note
• https://vulncheck.com/advisories/wordpress-plugin-cookie-law-bar-stored-xss-via-clb-bar-msg · Note
• https://cookielawinfo.com/wordpress-plugin · Note