Lucene search
JrXnmWPVDB-ID:87A64B27-23A3-40F5-A3D8-0650975FEE6FHistoryJan 18, 2022 - 12:00 a.m.
Give < 2.17.3 - Unauthenticated Reflected Cross-Site Scripting
2022-01-1800:00:00
JrXnm
wpscan.com
6
unauthenticated
reflected cross-site scripting
give plugin
ajax action
EPSS
0.001
Percentile
41.5%
The plugin does not sanitise and escape the form_id parameter before outputting it back in the response of an unauthenticated request via the give_checkout_login AJAX action, leading to a Reflected Cross-Site Scripting
PoC
As an unauthenticated user:
Related
nuclei
nuclei
WordPress GiveWP <2.17.3 - Cross-Site Scripting
2022-12-12 16:23:16
prion
prion
Cross site scripting
2022-02-21 11:15:00
patchstack
patchstack
nvd
nvd
CVE-2021-25099
2022-02-21 11:15:08
cve
cve
CVE-2021-25099
2022-02-21 11:15:08
cvelist
cvelist
wpexploit
wpexploit
Give < 2.17.3 - Unauthenticated Reflected Cross-Site Scripting
2022-01-18 00:00:00
openvas
openvas
WordPress GiveWP Plugin < 2.17.3 Multiple Vulnerabilities
2022-03-01 00:00:00