Missing Authorization in Cookie Notice Cache Purge and AJAX Handlers

Cookie Notice does not verify the current user's capabilities before running several state-changing actions. The cache purge triggered by the hu_purge_cache frontend parameter requires no authentication at all, letting any visitor force repeated configuration requests to the vendor platform. Two admin AJAX handlers, the privacy consent form status... Weiterlesen