Lucene search
K

4 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 11:0 p.m.9 views

CVE-2022-2194

The Accept Stripe Payments WordPress plugin before 2.0.64 does not sanitize and escape some of its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

4.8CVSS6.2AI score0.00493EPSS
Exploits1References1
NVD
NVD
added 2022/07/17 11:15 a.m.18 views

CVE-2022-2194

The Accept Stripe Payments WordPress plugin before 2.0.64 does not sanitize and escape some of its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

4.8CVSS0.00493EPSS
Exploits1References1
CVE
CVE
added 2022/07/17 10:37 a.m.71 views

CVE-2022-2194

The CVE-2022-2194 entry concerns the WordPress Accept Stripe Payments plugin, affected versions before 2.0.64. The issue is a cross-site scripting (XSS) vulnerability caused by insufficient sanitization/escaping of certain plugin settings, enabling an admin (high privilege) to perform XSS even wh...

4.8CVSS4.8AI score0.00493EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2022/07/17 10:37 a.m.21 views

CVE-2022-2194 Accept Stripe Payments < 2.0.64 - Admin+ Stored Cross-Site Scripting

The Accept Stripe Payments WordPress plugin before 2.0.64 does not sanitize and escape some of its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

5.1AI score0.00493EPSS
Exploits1References1
Rows per page
Query Builder