Lucene search

K
wpvulndbP7e4WPVDB-ID:6D596AFB-CAC3-4EF2-9742-235C068D1006
HistoryApr 26, 2022 - 12:00 a.m.

Donate Extra <= 2.02 - Reflected Cross-Site Scripting

2022-04-2600:00:00
p7e4
wpscan.com
4
reflected cross-site scripting
parameter sanitization
response output

EPSS

0.001

Percentile

40.2%

The plugin does not sanitise and escape a parameter before outputting it back in the response, leading to a Reflected cross-Site Scripting

PoC

EPSS

0.001

Percentile

40.2%

Related for WPVDB-ID:6D596AFB-CAC3-4EF2-9742-235C068D1006