2 matches found
CVE-2021-25099
The GiveWP WordPress plugin before 2.17.3 does not sanitise and escape the formid parameter before outputting it back in the response of an unauthenticated request via the givecheckoutlogin AJAX action, leading to a Reflected Cross-Site Scripting...
6.1CVSS6.3AI score0.02145EPSS
SaveExploits2References4
CVE-2021-25099: Improper Neutralization of Input During Web Page Generation
The GiveWP WordPress plugin before 2.17.3 does not sanitise and escape the formid parameter before outputting it back in the response of an unauthenticated request via the givecheckoutlogin AJAX action, leading to a Reflected Cross-Site Scripting...
6.1CVSS6.4AI score0.02145EPSS
SaveExploits2References2
20