Lucene search
PRIOn knowledge basePRION:CVE-2021-25099HistoryFeb 21, 2022 - 11:15 a.m.
Cross site scripting
2022-02-2111:15:00
PRIOn knowledge base
www.prio-n.com
5
0.001 Low
EPSS
Percentile
41.6%
The GiveWP WordPress plugin before 2.17.3 does not sanitise and escape the form_id parameter before outputting it back in the response of an unauthenticated request via the give_checkout_login AJAX action, leading to a Reflected Cross-Site Scripting
Related
nuclei
nuclei
WordPress GiveWP <2.17.3 - Cross-Site Scripting
2022-12-12 16:23:16
cve
cve
CVE-2021-25099
2022-02-21 11:15:08
patchstack
patchstack
nvd
nvd
CVE-2021-25099
2022-02-21 11:15:08
wpvulndb
wpvulndb
Give < 2.17.3 - Unauthenticated Reflected Cross-Site Scripting
2022-01-18 00:00:00
cvelist
cvelist
wpexploit
wpexploit
Give < 2.17.3 - Unauthenticated Reflected Cross-Site Scripting
2022-01-18 00:00:00
openvas
openvas
WordPress GiveWP Plugin < 2.17.3 Multiple Vulnerabilities
2022-03-01 00:00:00