Description
The Donate Extra WordPress plugin through 2.02 does not sanitise and escape a parameter before outputting it back in the response, leading to a Reflected cross-Site Scripting
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Donate Extra | 2.02 – ≤ 2.02 | — |