Skip to content
Sign in
5.1 Medium

CVE-2021-47983 WordPress Plugin Stripe Payments before 2.0.40 contains a stored cross-site scripting vulnerability that allows…

Description

WordPress Plugin Stripe Payments before 2.0.40 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the AcceptStripePayments-settings[currency_code] parameter. Attackers can submit POST requests to /wp-admin/options.php with script payloads in the currency_code field to execute arbitrary JavaScript in administrator browsers when settings are viewed.

Affected products and versions

Product Affected versions Fixed in
Accept Stripe Payments 2.0 earliest → < 2.0.40 2.0.40

Other CVEs of Accept Stripe Payments

The 2 CVEs of Accept Stripe Payments →
CVE-2024-7353 The Accept Stripe Payments plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's… 5.4 Medium
Track this CVE