tarteaucitron.io – Cookie Banner & GDPR Consent Management

tarteaucitron.io – Cookie Banner & GDPR Consent Management has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2021 and 2025; all 3 are fixed as of October 2026. Their average CVSS score is 6.2, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 1 high. 2021 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 2 of the records (67%). Other recurring categories include Cross-Site Request Forgery (CSRF).

Every one of the 3 issues recorded for tarteaucitron.io – Cookie Banner & GDPR Consent Management has a vendor fix available, so running the current release closes all known holes.

3 independent researchers contributed these findings, one record each.

Strategic Overview

Avg CVSSMedium

6.2/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all tarteaucitron.io – Cookie Banner & GDPR Consent Management vulnerabilities before they are exploited.

Highest severity on recordCVSS 8.8CVE-2021-36887

tarteaucitron.js – Cookies legislation & GDPR <= 1.5.4 - Cross-Site Request Forgery to Cross-Site Scripting

Read the full analysis

Vulnerability Records

3 records


2025-05-28 00:00	tarteaucitron.io <= 1.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting tarteaucitron.io <= 1.9.4	`CVE-2025-4955`	6.4 Medium	Pierre Rudloff	Yes
2021-12-17 14:06	tarteaucitron.js – Cookies legislation & GDPR (WordPress plugin) <= 1.6 - Cross-Site Scripting tarteaucitron.io <= 1.6	`CVE-2021-36889`	3.4 Low	R3N0	Yes
2021-12-09 00:00	tarteaucitron.js – Cookies legislation & GDPR <= 1.5.4 - Cross-Site Request Forgery to Cross-Site Scripting tarteaucitron.io <= 1.5.4	`CVE-2021-36887`	8.8 High	Julio Potier	Yes

Showing 1–3 of 3 reports