WordPress Accept Stripe Payments plugin <= 2.0.86 - Authenticated (Contributor+) Stored Cross-Site Scripting via accept_stripe_payment_ng Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via acceptstripepaymentng Shortcode vulnerability discovered by Arkadiusz Hydzik in WordPress Plugin Stripe Payments versions = 2.0.86...

CVE-2024-7353: Improper Neutralization of Input During Web Page Generation

The Accept Stripe Payments plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's acceptstripepaymentng shortcode in all versions up to, and including, 2.0.86 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible...