CVE-2021-24315

The GiveWP – Donation Plugin and Fundraising Platform WordPress plugin before 2.10.4 did not sanitise or escape the Background Image field of its Stripe Checkout Setting and Logo field in its Email settings, leading to authenticated admin+ Stored XSS issues...

CVE-2021-24315 Give WP < 2.10.4 - Authenticated Stored Cross-Site Scripting (XSS)

The GiveWP – Donation Plugin and Fundraising Platform WordPress plugin before 2.10.4 did not sanitise or escape the Background Image field of its Stripe Checkout Setting and Logo field in its Email settings, leading to authenticated admin+ Stored XSS issues...

CVE-2021-24315

CVE-2021-24315 affects GiveWP – Donation Plugin and Fundraising Platform for WordPress, prior to version 2.10.4. The issue is an authenticated Stored XSS caused by insufficient sanitisation/escaping of the Background Image field in Stripe Checkout settings and the Logo field in Email settings. Ro...