2 matches found
CVE-2022-2565
The Simple Payment Donations & Subscriptions WordPress plugin before 4.2.1 does not sanitise and escape user input given in its forms, which could allow unauthenticated attackers to perform Cross-Site Scripting attacks against admins...
7.2CVSS5.8AI score0.00715EPSS
SaveExploits2References1
CVE-2022-2565: Improper Neutralization of Input During Web Page Generation
The Simple Payment Donations & Subscriptions WordPress plugin before 4.2.1 does not sanitise and escape user input given in its forms, which could allow unauthenticated attackers to perform Cross-Site Scripting attacks against admins...
7.2CVSS7.3AI score0.00715EPSS
SaveExploits2References2
20