CVE-2022-2565

Best Payments Plugin for WP < 4.2.1 - Unauthenticated Stored Cross-Site Scripting

State: Published
Severity: Not scored
Published: Sep 5, 2022
Updated: Aug 3, 2024
Reserved: Jul 28, 2022

Description

The Simple Payment Donations & Subscriptions WordPress plugin before 4.2.1 does not sanitise and escape user input given in its forms, which could allow unauthenticated attackers to perform Cross-Site Scripting attacks against admins

Scores

The record has no CVSS score.

Weaknesses

CWE-79 Cross-Site Scripting (XSS)

Affected Products

Product	Versions
Simple Payment Donations & Subscriptions Plugin by Paymattic – Best Payments Plugin for WPUnknown	4.2.1 to before 4.2.1Affected

References

https://wpscan.com/vulnerability/d89eff7d-a3e6-4876-aa0e-6d17e206af83

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.