CVE-2022-1268 — Donate Extra <= 2.02 - Reflected Cross-Site Scripting

CVE-2022-1268

Donate Extra <= 2.02 - Reflected Cross-Site Scripting PUBLISHED

Description (CNA)

The Donate Extra WordPress plugin through 2.02 does not sanitise and escape a parameter before outputting it back in the response, leading to a Reflected cross-Site Scripting

Affected (CNA)

Vendor / product	Versions
Unknown / Donate Extra	affected 2.02 through 2.02

CWE

CWE-79

References

https://wpscan.com/vulnerability/6d596afb-cac3-4ef2-9742-235c068d1006

ADP enrichment

CVE

No English description supplied.

https://wpscan.com/vulnerability/6d596afb-cac3-4ef2-9742-235c068d1006