deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-41299
Published: 2023-09-25
Description: DoS vulnerability in the PMS module. Successful exploitation of this vulnerability may cause the system to restart.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120, CWE-120
References: https://consumer.huawei.com/en/support/bulletin/2023/9/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202309-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2023/9/
CVE: CVE-2023-41419
Published: 2023-09-25
Description: An issue in Gevent before version 23.9.0 allows a remote attacker to escalate privileges via a crafted script to the WSGIServer component.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/gevent/gevent/commit/2f53c851eaf926767fbac62385615efd4886221c; https://github.com/gevent/gevent/issues/1989; https://github.com/gevent/gevent/commit/2f53c851eaf926767fbac62385615efd4886221c
CVE: CVE-2022-48605
Published: 2023-09-25
Description: Input verification vulnerability in the fingerprint module. Successful exploitation of this vulnerability will affect confidentiality, integrity, and availability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20, CWE-20
References: https://consumer.huawei.com/en/support/bulletin/2023/9/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202309-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2023/9/
CVE: CVE-2023-41293
Published: 2023-09-25
Description: Data security classification vulnerability in the DDMP module. Successful exploitation of this vulnerability may affect confidentiality.
CVSS Score: 7.5 (HIGH)
CWE: CWE-227, CWE-200
References: https://consumer.huawei.com/en/support/bulletin/2023/9/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202309-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2023/9/
CVE: CVE-2023-41300
Published: 2023-09-25
Description: Vulnerability of parameters not being strictly verified in the PMS module. Successful exploitation of this vulnerability may cause the system to restart.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://consumer.huawei.com/en/support/bulletin/2023/9/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202309-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2023/9/
CVE: CVE-2023-41301
Published: 2023-09-25
Description: Vulnerability of unauthorized API access in the PMS module. Successful exploitation of this vulnerability may cause features to perform abnormally.
CVSS Score: 7.5 (HIGH)
CWE: CWE-269
References: https://consumer.huawei.com/en/support/bulletin/2023/9/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202309-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2023/9/
CVE: CVE-2023-41302
Published: 2023-09-25
Description: Redirection permission verification vulnerability in the home screen module. Successful exploitation of this vulnerability may cause features to perform abnormally.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-22
References: https://consumer.huawei.com/en/support/bulletin/2023/9/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202309-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2023/9/
CVE: CVE-2023-41303
Published: 2023-09-25
Description: Command injection vulnerability in the distributed file system module. Successful exploitation of this vulnerability may cause variables in the sock structure to be modified.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-77
References: https://device.harmonyos.com/en/docs/security/update/security-bulletins-202309-[PII_REDACTED]; https://https://consumer.huawei.com/en/support/bulletin/2023/9/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202309-[PII_REDACTED]
CVE: CVE-2023-43256
Published: 2023-09-25
Description: A path traversal in Gladys Assistant v4.26.1 and below allows authenticated attackers to extract sensitive files in the host machine by exploiting a non-sanitized user input.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://blog.moku.fr/cves/CVE-2023-43256/; https://blog.moku.fr/cves/CVE-unassigned/; https://github.com/GladysAssistant/Gladys/commit/f27d0ea4689c3deca5739b5f9ed45a2ddbf00b7b
CVE: CVE-2023-43131
Published: 2023-09-25
Description: General Device Manager 2.5.2.2 is vulnerable to Buffer Overflow.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://www.exploit-db.com/exploits/51641; https://www.exploit-db.com/exploits/51641
CVE: CVE-2023-43456
Published: 2023-09-25
Description: Cross Site Scripting vulnerability in Service Provider Management System v.1.0 allows a remote attacker to execute arbitrary code and obtain sensitive information via the firstname, middlename and lastname parameters in the /php-spms/admin/?page=user endpoint.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://samh4cks.github.io/posts/cve-2023-43456/; https://www.sourcecodester.com/php/16501/service-provider-management-system-using-php-and-mysql-source-code-free-download.html; https://www.sourcecodester.com/users/tips23
CVE: CVE-2023-0625
Published: 2023-09-25
Description: Docker Desktop before 4.12.0 is vulnerable to RCE via a crafted extension description or changelog.

This issue affects Docker Desktop: before 4.12.0.


CVSS Score: 8.0 (HIGH)
CWE: CWE-79, CWE-94, CWE-829, CWE-94
References: https://docs.docker.com/desktop/release-notes/#4120; https://docs.docker.com/desktop/release-notes/#4120
CVE: CVE-2023-0626
Published: 2023-09-25
Description: Docker Desktop before 4.12.0 is vulnerable to RCE via query parameters in message-box route.

This issue affects Docker Desktop: before 4.12.0.


CVSS Score: 8.0 (HIGH)
CWE: CWE-94, CWE-94
References: https://docs.docker.com/desktop/release-notes/#4120; https://docs.docker.com/desktop/release-notes/#4120
CVE: CVE-2023-0627
Published: 2023-09-25
Description: Docker Desktop 4.11.x allows --no-windows-containers flag bypass via IPC response spoofing which may lead to Local Privilege Escalation (LPE).This issue affects Docker Desktop: 4.11.X.


CVSS Score: 6.7 (MEDIUM)
CWE: CWE-501
References: https://docs.docker.com/desktop/release-notes/#4120; https://docs.docker.com/desktop/release-notes/#4120
CVE: CVE-2023-0633
Published: 2023-09-25
Description: In Docker Desktop on Windows before 4.12.0 an argument injection to installer may result in local privilege escalation (LPE).This issue affects Docker Desktop: before 4.12.0.


CVSS Score: 7.2 (HIGH)
CWE: CWE-88, CWE-88
References: https://docs.docker.com/desktop/release-notes/#4120; https://docs.docker.com/desktop/release-notes/#4120
CVE: CVE-2023-23567
Published: 2023-09-25
Description: A heap-based buffer overflow vulnerability exists in the CreateDIBfromPict functionality of Accusoft ImageGear 20.1. A specially crafted file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.
CVSS Score: 8.1 (HIGH)
CWE: CWE-119, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2023-1729; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1729; https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1729
CVE: CVE-2023-28393
Published: 2023-09-25
Description: A stack-based buffer overflow vulnerability exists in the tif_processing_dng_channel_count functionality of Accusoft ImageGear 20.1. A specially crafted malformed file can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-121, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2023-1742; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1742; https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1742
CVE: CVE-2023-32284
Published: 2023-09-25
Description: An out-of-bounds write vulnerability exists in the tiff_planar_adobe functionality of Accusoft ImageGear 20.1. A specially crafted malformed file can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability.
CVSS Score: 8.1 (HIGH)
CWE: CWE-119, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2023-1750; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1750; https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1750
CVE: CVE-2023-32614
Published: 2023-09-25
Description: A heap-based buffer overflow vulnerability exists in the create_png_object functionality of Accusoft ImageGear 20.1. A specially crafted malformed file can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability.
CVSS Score: 7.0 (HIGH)
CWE: CWE-124, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2023-1749; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1749; https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1749
CVE: CVE-2023-32653
Published: 2023-09-25
Description: An out-of-bounds write vulnerability exists in the dcm_pixel_data_decode functionality of Accusoft ImageGear 20.1. A specially crafted malformed file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-191, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2023-1802; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1802; https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1802
CVE: CVE-2023-35002
Published: 2023-09-25
Description: A heap-based buffer overflow vulnerability exists in the pictwread functionality of Accusoft ImageGear 20.1. A specially crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119, CWE-119
References: https://talosintelligence.com/vulnerability_reports/TALOS-2023-1760; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1760; https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1760
CVE: CVE-2023-39453
Published: 2023-09-25
Description: A use-after-free vulnerability exists in the tif_parse_sub_IFD functionality of Accusoft ImageGear 20.1. A specially crafted malformed file can lead to arbitrary code execution. An attacker can deliver this file to trigger this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416, CWE-416
References: https://talosintelligence.com/vulnerability_reports/TALOS-2023-1830; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1830; https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1830
CVE: CVE-2023-3226
Published: 2023-09-25
Description: The Popup Builder WordPress plugin before 4.2.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
CVSS Score: 4.8 (MEDIUM)
References: https://wpscan.com/vulnerability/941a9aa7-f4b2-474a-84d9-9a74c99079e2; https://wpscan.com/vulnerability/941a9aa7-f4b2-474a-84d9-9a74c99079e2
CVE: CVE-2023-3547
Published: 2023-09-25
Description: The All in One B2B for WooCommerce WordPress plugin through 1.0.3 does not properly check nonce values in several actions, allowing an attacker to perform CSRF attacks.
CVSS Score: 8.8 (HIGH)
References: https://wpscan.com/vulnerability/3cfb6696-18ad-4a38-9ca3-992f0b768b78; https://wpscan.com/vulnerability/3cfb6696-18ad-4a38-9ca3-992f0b768b78
CVE: CVE-2023-3550
Published: 2023-09-25
Description: Mediawiki v1.40.0 does not validate namespaces used in XML files.

Therefore, if the instance administrator allows XML file uploads,

a remote attacker with a low-privileged user account can use this

exploit to become an administrator by sending a malicious link to

the instance administrator.
CVSS Score: 7.3 (HIGH)
CWE: CWE-79, CWE-79
References: https://fluidattacks.com/advisories/blondie/; https://lists.debian.org/debian-lts-announce/2023/11/msg00027.html; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FU2FGUXXK6TMV6R52VRECLC6XCSQQISY/
CVE: CVE-2023-3664
Published: 2023-09-25
Description: The FileOrganizer WordPress plugin through 1.0.2 does not restrict functionality on multisite instances, allowing site admins to gain full control over the server.
CVSS Score: 7.2 (HIGH)
References: https://wpscan.com/vulnerability/d59e6eac-3ebf-40e0-800c-8cbef345423f; https://wpscan.com/vulnerability/d59e6eac-3ebf-40e0-800c-8cbef345423f
CVE: CVE-2023-40163
Published: 2023-09-25
Description: An out-of-bounds write vulnerability exists in the allocate_buffer_for_jpeg_decoding functionality of Accusoft ImageGear 20.1. A specially crafted malformed file can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2023-1836; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1836; https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1836
CVE: CVE-2023-43141
Published: 2023-09-25
Description: TOTOLINK A3700R V9.1.2u.6134_B20201202 and N600R V5.3c.5137 are vulnerable to Incorrect Access Control.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-284
References: http://totolink.com; https://github.com/Blue-And-White/vul/blob/main/Iot/TOTOLINK/1/readme.md; http://totolink.com
CVE: CVE-2023-43339
Published: 2023-09-25
Description: Cross-Site Scripting (XSS) vulnerability in cmsmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted payload injected into the Database Name, DataBase User or Database Port components.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.cmsmadesimple.org/; https://github.com/sromanhu/CVE-2023-43339-CMSmadesimple-Reflected-XSS---Installation/blob/main/README.md; https://github.com/sromanhu/Cmsmadesimple-CMS-Stored-XSS/blob/main/README.md
CVE: CVE-2023-43382
Published: 2023-09-25
Description: Directory Traversal vulnerability in itechyou dreamer CMS v.4.1.3 allows a remote attacker to execute arbitrary code via the themePath in the uploaded template function.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22
References: https://aecous.github.io/2023/09/17/Text/?[CREDENTIAL_REDACTED]; https://gist.github.com/Aecous/7c6524859d624c00f4a975ecd5a743a7; https://gitee.com/iteachyou/dreamer_cms/issues/I821AI
CVE: CVE-2023-4148
Published: 2023-09-25
Description: The Ditty WordPress plugin before 3.1.25 does not sanitise and escape some parameters and generated URLs before outputting them back in attributes, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/aa39de78-55b3-4237-84db-6fdf6820c58d; https://wpscan.com/vulnerability/aa39de78-55b3-4237-84db-6fdf6820c58d
CVE: CVE-2023-4238
Published: 2023-09-25
Description: The Prevent files / folders access WordPress plugin before 2.5.2 does not validate files to be uploaded, which could allow attackers to upload arbitrary files such as PHP on the server.
CVSS Score: 7.2 (HIGH)
References: https://wpscan.com/vulnerability/53816136-4b1a-4b7d-b73b-08a90c2a638f; https://wpscan.com/vulnerability/53816136-4b1a-4b7d-b73b-08a90c2a638f
CVE: CVE-2023-4281
Published: 2023-09-25
Description: This Activity Log WordPress plugin before 2.8.8 retrieves client IP addresses from potentially untrusted headers, allowing an attacker to manipulate its value. This may be used to hide the source of malicious traffic.
CVSS Score: 5.3 (MEDIUM)
References: https://wpscan.com/vulnerability/f5ea6c8a-6b07-4263-a1be-dd033f078d49; https://wpscan.com/vulnerability/f5ea6c8a-6b07-4263-a1be-dd033f078d49
CVE: CVE-2023-4300
Published: 2023-09-25
Description: The Import XML and RSS Feeds WordPress plugin before 2.1.4 does not filter file extensions for uploaded files, allowing an attacker to upload a malicious PHP file, leading to Remote Code Execution.
CVSS Score: 7.2 (HIGH)
References: https://wpscan.com/vulnerability/d4[PII_REDACTED]-4d5f-9703-4b2ac4a51c42; https://wpscan.com/vulnerability/d4[PII_REDACTED]-4d5f-9703-4b2ac4a51c42
CVE: CVE-2023-4476
Published: 2023-09-25
Description: The Locatoraid Store Locator WordPress plugin before 3.9.24 does not sanitise and escape the lpr-search parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.
CVSS Score: 6.1 (MEDIUM)
References: https://wpscan.com/vulnerability/3ca22b22-fe89-42be-94ec-b164838bcf50; https://wpscan.com/vulnerability/3ca22b22-fe89-42be-94ec-b164838bcf50
CVE: CVE-2023-4490
Published: 2023-09-25
Description: The WP Job Portal WordPress plugin before 2.0.6 does not sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users
CVSS Score: 9.8 (CRITICAL)
References: https://wpscan.com/vulnerability/986024f0-3c8d-44d8-a9c9-1dd284d7db0d; https://wpscan.com/vulnerability/986024f0-3c8d-44d8-a9c9-1dd284d7db0d
CVE: CVE-2023-4502
Published: 2023-09-25
Description: The Translate WordPress with GTranslate WordPress plugin before 3.0.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). This vulnerability affects multiple parameters.
CVSS Score: 4.8 (MEDIUM)
References: https://wpscan.com/vulnerability/e4804850-2ac2-4cec-bc27-07ed191d96da; https://wpscan.com/vulnerability/e4804850-2ac2-4cec-bc27-07ed191d96da
CVE: CVE-2023-4521
Published: 2023-09-25
Description: The Import XML and RSS Feeds WordPress plugin before 2.1.5 contains a web shell, allowing unauthenticated attackers to perform RCE. The plugin/vendor was not compromised and the files are the result of running a PoC for a previously reported issue (https://wpscan.com/vulnerability/d4[PII_REDACTED]-4d5f-9703-4b2ac4a51c42) and not deleting the created files when releasing the new version.
CVSS Score: 9.8 (CRITICAL)
References: https://wpscan.com/vulnerability/de2cdb38-3a9f-448e-b564-a798d1e93481; https://wpscan.com/vulnerability/de2cdb38-3a9f-448e-b564-a798d1e93481
CVE: CVE-2023-4549
Published: 2023-09-25
Description: The DoLogin Security WordPress plugin before 3.7 does not properly sanitize IP addresses coming from the X-Forwarded-For header, which can be used by attackers to conduct Stored XSS attacks via WordPress' login form.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/8aebead0-0eab-4d4e-8ceb-8fea0760374f; https://wpscan.com/vulnerability/8aebead0-0eab-4d4e-8ceb-8fea0760374f
CVE: CVE-2023-4631
Published: 2023-09-25
Description: The DoLogin Security WordPress plugin before 3.7 uses headers such as the X-Forwarded-For to retrieve the IP address of the request, which could lead to IP spoofing.
CVSS Score: 5.3 (MEDIUM)
References: https://wpscan.com/vulnerability/28613fc7-1400-4553-bcc3-24df1cee418e; https://wpscan.com/vulnerability/28613fc7-1400-4553-bcc3-24df1cee418e
CVE: CVE-2023-4892
Published: 2023-09-25
Description: Teedy v1.11 has a vulnerability in its text editor that allows events

to be executed in HTML tags that an attacker could manipulate. Thanks

to this, it is possible to execute malicious JavaScript in the webapp.




CVSS Score: 5.7 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://fluidattacks.com/advisories/freebird; https://teedy.io; https://fluidattacks.com/advisories/freebird
CVE: CVE-2023-5156
Published: 2023-09-25
Description: A flaw was found in the GNU C Library. A recent fix for CVE-2023-4806 introduced the potential for a memory leak, which may result in an application crash.
CVSS Score: 7.5 (HIGH)
CWE: CWE-401, CWE-401
References: https://access.redhat.com/security/cve/CVE-2023-5156; https://bugzilla.redhat.com/show_bug.cgi?id=2240541; https://sourceware.org/bugzilla/show_bug.cgi?id=30884
CVE: CVE-2023-5158
Published: 2023-09-25
Description: A flaw was found in vringh_kiov_advance in drivers/vhost/vringh.c in the host side of a virtio ring in the Linux Kernel. This issue may result in a denial of service from guest to host via zero length descriptor.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-684
References: https://access.redhat.com/security/cve/CVE-2023-5158; https://bugzilla.redhat.com/show_bug.cgi?id=2240561; https://access.redhat.com/security/cve/CVE-2023-5158
CVE: CVE-2023-5165
Published: 2023-09-25
Description: Docker Desktop before 4.23.0 allows an unprivileged user to bypass Enhanced Container Isolation (ECI) restrictions via the debug shell which remains accessible for a short time window after launching Docker Desktop. The affected functionality is available for Docker Business customers only and assumes an environment where users are not granted local root or Administrator privileges. 

This issue has been fixed in Docker Desktop 4.23.0. 

Affected Docker Desktop versions: from 4.13.0 before 4.23.0.

CVSS Score: 7.1 (HIGH)
CWE: CWE-424, CWE-862, CWE-862
References: https://docs.docker.com/desktop/release-notes/#4230; https://docs.docker.com/desktop/release-notes/#4230
CVE: CVE-2023-5166
Published: 2023-09-25
Description: Docker Desktop before 4.23.0 allows Access Token theft via a crafted extension icon URL.

This issue affects Docker Desktop: before 4.23.0.


CVSS Score: 8.0 (HIGH)
CWE: CWE-200
References: https://docs.docker.com/desktop/release-notes/#4230; https://docs.docker.com/desktop/release-notes/#4230
CVE: CVE-2023-4156
Published: 2023-09-25
Description: A heap out-of-bounds read flaw was found in builtin.c in the gawk package. This issue may lead to a crash and could be used to read sensitive information.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://access.redhat.com/security/cve/CVE-2023-4156; https://bugzilla.redhat.com/show_bug.cgi?id=2215930; https://access.redhat.com/security/cve/CVE-2023-4156
CVE: CVE-2023-39640
Published: 2023-09-25
Description: UpLight cookiebanner before 1.5.1 was discovered to contain a SQL injection vulnerability via the component Hook::getHookModuleExecList().
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://security.friendsofpresta.org/modules/2023/09/21/cookiebanner.html; https://security.friendsofpresta.org/modules/2023/09/21/cookiebanner.html