CVE-2022-2565

CVE-2022-2565 affects the WordPress plugin Simple Payment Donations & Subscriptions prior to 4.2.1. The vulnerability is an unauthenticated Cross-Site Scripting (XSS) caused by the plugin not sanitising and escaping user input in its forms, potentially allowing an attacker to craft inputs that tr...