Description (CNA)
The GiveWP – Donation Plugin and Fundraising Platform WordPress plugin before 2.10.0 was affected by a reflected Cross-Site Scripting vulnerability inside of the administration panel, via the 's' GET parameter on the Donors page.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| GiveWP / GiveWP – Donation Plugin and Fundraising Platform | affected 2.4.0 before 2.4.0*; affected 2.10.0 before 2.10.0 |
CWE
CWE-79
References
- https://wpscan.com/vulnerability/da4ab508-a423-4c7f-a1d4-42ec6f989309
- https://bentl.ee/posts/cve-givewp/
ADP enrichment
No English description supplied.