CVE-2021-24213

GiveWP < 2.10.0 - Reflected Cross Site Scripting (XSS)

EPSS 1.4%CWE-79

The GiveWP – Donation Plugin and Fundraising Platform WordPress plugin before 2.10.0 was affected by a reflected Cross-Site Scripting vulnerability inside of the administration panel, via the 's' GET parameter on the Donors page.

Produtos afetados

GiveWP · GiveWP – Donation Plugin and Fundraising Platform

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://bentl.ee/posts/cve-givewp/https://wpscan.com/vulnerability/da4ab508-a423-4c7f-a1d4-42ec6f989309