← CVE Intelligence

CVE-2022-2565

Best Payments Plugin for WP < 4.2.1 - Unauthenticated Stored Cross-Site Scripting PUBLISHED

Description (CNA)

The Simple Payment Donations & Subscriptions WordPress plugin before 4.2.1 does not sanitise and escape user input given in its forms, which could allow unauthenticated attackers to perform Cross-Site Scripting attacks against admins

Affected (CNA)

Vendor / productVersions
Unknown / Simple Payment Donations & Subscriptions Plugin by Paymattic – Best Payments Plugin for WPaffected 4.2.1 before 4.2.1

CWE

CWE-79

References

ADP enrichment

CVE

No English description supplied.