Lucene search
WpvulndbWPVDB-ID:948CD7F0-D1BD-4875-A302-B04DEB1ECCABHistoryFeb 10, 2023 - 12:00 a.m.
Quick Paypal Payments < 5.7.26 - Admin+ Stored XSS
2023-02-1000:00:00
wpscan.com
10
paypal payments
stored xss
cross-site scripting
multisite
security issue
EPSS
0.001
Percentile
17.5%
The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
Related
nvd
nvd
CVE-2023-25702
2023-04-07 13:15:07
cvelist
cvelist
cve
cve
CVE-2023-25702
2023-04-07 13:15:07
prion
prion
Cross site scripting
2023-04-07 13:15:00