Skip to content
OpenAdvisories
Unscored CVE-2022-2565 EUVD-2022-34818GHSA-phr2-m496-gqwf

Best Payments Plugin for WP < 4.2.1 - Unauthenticated Stored Cross-Site Scripting

Published Sep 5, 2022 · Updated Aug 3, 2024 · Assigned by WPScan

Description

The Simple Payment Donations & Subscriptions WordPress plugin before 4.2.1 does not sanitise and escape user input given in its forms, which could allow unauthenticated attackers to perform Cross-Site Scripting attacks against admins

Affected products

VendorProductAffectedFixed
— Simple Payment Donations & Subscriptions Plugin by Paymattic – Best Payments Plugin for WP 4.2.1 – < 4.2.1 4.2.1

References