2 matches found
CVE-2019-9909
The "Donation Plugin and Fundraising Platform" plugin before 2.3.1 for WordPress has wp-admin/edit.php csv XSS...
6.1CVSS6.3AI score0.0142EPSS
SaveExploits1References4
CVE-2019-9909
The CVE concerns the WordPress GiveWP plugin (Donation Plugin and Fundraising Platform). Affected component: csv export functionality (wp-admin/edit.php) in GiveWP versions prior to 2.3.1. Root cause: improper handling/sanitization of input during CSV export leads to a Cross-Site Scripting (XSS) ...
6.1CVSS6.3AI score0.0142EPSS
SaveExploits1References4Affected Software1
20