CVE-2021-24213

The GiveWP – Donation Plugin and Fundraising Platform WordPress plugin before 2.10.0 was affected by a reflected Cross-Site Scripting vulnerability inside of the administration panel, via the 's' GET parameter on the Donors page...

CVE-2021-24213

creationtimestamp| type| source ---|---|--- 2021-05-22 02:01:46+00:00| seen| https://t.me/pwnwikizhchannel/477 2026-01-06 13:27:39+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-24213.yaml 2026-01-07 21:03:19+00:00| seen|...

CVE-2021-24213

The CVE-2021-24213 entry affects GiveWP (WordPress plugin) versions before 2.10.0. It is a reflected Cross-Site Scripting (XSS) vulnerability in the admin Donors page, triggered via the s parameter in the Donors page URL. Exploitation requires an admin to visit a crafted URL; successful exploitat...

WordPress GiveWP 2.9.7 Cross Site Scripting

Exploit Title: GiveWP 2.9.7 Reflected Cross-Site Scripting Date: 3/23/2021 Exploit Author: Austin Bentley Vendor Homepage: https://givewp.com/ Software Link: https://wordpress.org/plugins/give/ Version: 2.9.7 Tested on: Windows 7 CVE: CVE-2021-24213 Exploitation requirements: Admin must visit...