CVE-2020-20633

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

ajax_policy_generator in admin/modules/cli-policy-generator/classes/class-policy-generator-ajax.php in GDPR Cookie Consent (cookie-law-info) 1.8.2 and below plugin for WordPress, allows authenticated stored XSS and privilege escalation.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Aug 21, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-206346.5Elementor 2.9.5 and below WordPress plugin allows authenticated users to activate its safe mode feature. This can be exploited to disable alCVE-2020-206367.5SQL injection vulnerability found in Joyplus-cms v.1.6.0 allows a remote attacker to access sensitive information via the id parameter of thCVE-2020-206406.1Cross Site Scripting (XSS) vulnerability in ECShop 4.0 due to security filtering issues, in the user.php file, we can use the html entity enCVE-2020-206428.8Cross Site Request Forgery (CSRF) vulnerability exists in EyouCMS 1.3.6 that can add an htm page to execute the js code via login.php?m=admiCVE-2020-206455.4Cross Site Scripting (XSS) vulnerability exists in EyouCMS1.3.6 in the basic_information area.CVE-2020-206577.5Buffer overflow vulnerability in fcovatti libiec_iccp_mod v1.5, allows attackers to cause a denial of service via an unexpected packet whileCVE-2020-206587.5Buffer overflow vulnerability in fcovatti libiec_iccp_mod v1.5, allows attackers to cause a denail of service when trying to calloc an unexpCVE-2020-206626.5libiec_iccp_mod v1.5 contains a heap-buffer-overflow in the component mms_client_example1.c.CVE-2020-206636.5libiec_iccp_mod v1.5 contains a heap-buffer-overflow in the component mms_client_connection.c.CVE-2020-206646.5libiec_iccp_mod v1.5 contains a segmentation violation in the component server_example1.c.CVE-2020-206657.5rudp v0.6 was discovered to contain a memory leak in the component main.c.CVE-2020-206708.8An arbitrary file upload vulnerability in /admin/media/upload of ZKEACMS V3.2.0 allows attackers to execute arbitrary code via a crafted HTM
CVE-2020-20633: Medium severity, CVSS 5.4 | Vulnix