Skip to content
OpenAdvisories
High · 7.1 CVE-2025-23670 EUVD-2025-5703GHSA-82p8-58px-g6rr

WordPress 4 author cheer up donate plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability

Published Mar 3, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: montashov Product: 4 author cheer up donate

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in montashov 4 author cheer up donate 4-author-cheer-up-donate allows Reflected XSS.This issue affects 4 author cheer up donate: from n/a through <= 1.3.

Affected products

VendorProductAffectedFixed
montashov 4 author cheer up donate ≤ 1.3 —

References