Skip to content
OpenAdvisories
Medium · 6.8 CVE-2024-6021 EUVD-2024-47185GHSA-cx67-m2rh-98xh

Donation Block for PayPal <= 2.1.0 - Unauthenticated Stored XSS

Published Jul 30, 2024 · Updated Aug 1, 2024 · Assigned by WPScan

Description

The Donation Block For PayPal WordPress plugin through 2.1.0 does not sanitise and escape form submissions, leading to a stored cross-site scripting vulnerability

Affected products

VendorProductAffectedFixed
— Donation Block For PayPal ≤ 2.1.0 —

References