CVE-2024-5448

🗓️ 21 Jun 2024 06:15:12Reported by [email protected]Type

The PayPal Pay Now, Buy Now, Donation and Cart Buttons Shortcode WordPress plugin through 1.7 does not validate and escape some of its attributes, potentially allowing Stored Cross-Site Scripting attacks by users with contributor role and abov

Reporter	Title	Published	Views	Family All 12
CNNVD	WordPress plugin PayPal Pay Now, Buy Now, Donation and Cart Buttons Shortcode security vulnerability	21 Jun 202400:00	–	cnnvd
CVE	CVE-2024-5448	21 Jun 202406:00	–	cve
Cvelist	CVE-2024-5448 PayPal Pay Now, Buy Now, Donation and Cart Buttons Shortcode <= 1.7 - Contributor+ Stored XSS	21 Jun 202406:00	–	cvelist
OSV	CVE-2024-5448	21 Jun 202406:15	–	osv
Patchstack	WordPress PayPal Pay Now, Buy Now, Donation and Cart Buttons Shortcode plugin <= 1.7 - Contributor+ Stored XSS vulnerability	21 Jun 202407:25	–	patchstack
Patchstack	WordPress PayPal Pay Now, Buy Now, Donation and Cart Buttons Shortcode Plugin <= 1.7 is vulnerable to Cross Site Scripting (XSS)	21 Jun 202400:00	–	patchstack
Positive Technologies	PT-2024-36350 · WordPress · Paypal Pay Now	21 Jun 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-5448	23 May 202509:28	–	redhatcve
Vulnrichment	CVE-2024-5448 PayPal Pay Now, Buy Now, Donation and Cart Buttons Shortcode <= 1.7 - Contributor+ Stored XSS	21 Jun 202406:00	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (May 27, 2024 to June 2, 2024)	6 Jun 202415:09	–	wordfence