CVE-2022-3822

The Donations via PayPal WordPress plugin before 1.9.9 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2022-3822

CVE-2022-3822 affects the Donations via PayPal WordPress plugin (pre-1.9.9). The issue is due to insufficient sanitising/escaping of some settings, enabling stored XSS by highly privileged users (e.g., admins) even when unfiltered_html is disallowed, notably in multisite setups. Connected sources...

CVE-2022-3822 Donations via PayPal < 1.9.9 - Admin+ Stored XSS

The Donations via PayPal WordPress plugin before 1.9.9 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...