WordPress Кнопка Яндекс Денег plugin <= 2.3.3 - Reflected Cross-Site Scripting (XSS) vulnerability

2021-08-0900:00:00

WPScanTeam

patchstack.com

Reflected Cross-Site Scripting (XSS) vulnerability discovered by iohex and WPScanTeam in WordPress Кнопка Яндекс Денег plugin (versions <= 2.3.3).

Solution

           Update the WordPress Кнопка Яндекс Денег plugin to the latest available version (at least 2.4.0).

CPENameOperatorVersion
кнопка яндекс денегle2.3.3

CPE	Name	Operator	Version
	кнопка яндекс денег	le	2.3.3

wordpress.org/plugins/yandex-money-button/#developers

wpscan.com/vulnerability/a88ffc42-6611-406e-8660-3af24c9cc5e8