← volver
CVE-2022-2565

Best Payments Plugin for WP < 4.2.1 - Unauthenticated Stored Cross-Site Scripting

EPSS 0.6%CWE-79
The Simple Payment Donations & Subscriptions WordPress plugin before 4.2.1 does not sanitise and escape user input given in its forms, which could allow unauthenticated attackers to perform Cross-Site Scripting attacks against admins

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →