CVE-2019-9909

The "Donation Plugin and Fundraising Platform" plugin before 2.3.1 for WordPress has wp-admin/edit.php csv XSS...

CVE-2019-9909

The CVE concerns the WordPress GiveWP plugin (Donation Plugin and Fundraising Platform). Affected component: csv export functionality (wp-admin/edit.php) in GiveWP versions prior to 2.3.1. Root cause: improper handling/sanitization of input during CSV export leads to a Cross-Site Scripting (XSS) ...