CVE-2022-2565

Summary

The Simple Payment Donations & Subscriptions WordPress plugin before 4.2.1 does not sanitise and escape user input given in its forms, which could allow unauthenticated attackers to perform Cross-Site Scripting attacks against admins

Affected Software

VendorProductVersion RangeStatus
UnknownSimple Payment Donations & Subscriptions Plugin by Paymattic – Best Payments Plugin for WP4.2.1 < 4.2.1affected

Weaknesses

  • CWE-79: CWE-79 Cross-Site Scripting (XSS)

ADP Enrichment

CVE Program Container

Additional References

References