Lucene search
+L

81 matches found

WPVulnDB
WPVulnDB
•added 2021/06/02 12:00 a.m.•40 views

GetPaid < 2.3.4 - Authenticated Stored XSS

In the plugin, users with the contributor role and above can create a new Payment Form, however the Label and Help Text input fields were not getting sanitized properly. So it was possible to inject malicious content such as img tags, leading to a Stored Cross-Site Scripting issue which is...

5.4CVSS0.1AI score0.00624EPSS
SaveExploits2Affected Software1
Rows per page
Query Builder