PT-2025-7654 · WordPress · Accept Donations With Paypal & Stripe

Name of the Vulnerable Software and Affected Versions: Accept Donations with PayPal & Stripe plugin for WordPress versions up to, and including, 1.4.4 Description: The issue is related to Reflected Cross-Site Scripting due to insufficient input sanitization and output escaping, allowing...

CVE-2024-13728: Improper Neutralization of Input During Web Page Generation

The Accept Donations with PayPal & Stripe plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the rf parameter in all versions up to, and including, 1.4.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to injec...

CVE-2008-1258

CVE-2008-1258 is a cross-site scripting (XSS) vulnerability in the D-Link DI-604 router, affecting prim.htm via the rf parameter. Remote attackers could inject arbitrary web script/HTML through rf. The provided documents confirm the affected product and vulnerability mechanism; no remediation det...

CVE-2008-1258: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in prim.htm on the D-Link DI-604 router allows remote attackers to inject arbitrary web script or HTML via the rf parameter...

CVE-2006-1959: Undefined Security Weakness

PHP remote file inclusion vulnerability in direct.php in ActualScripts ActualAnalyzer Lite 2.72 and earlier, Gold 7.63 and earlier, and Server 8.23 and earlier allows remote attackers to execute arbitrary code via a URL in the rf parameter...