Not rated
CVE-2021-24815 The Accept Donations with PayPal WordPress plugin before 1.3.2 does not escape the Amount Menu Name field of created…
Description
The Accept Donations with PayPal WordPress plugin before 1.3.2 does not escape the Amount Menu Name field of created Buttons, which could allow a high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Accept Donations with PayPal 1.3 | earliest → < 1.3.2 | 1.3.2 |
Other CVEs of Accept Donations with PayPal
The 4 CVEs of Accept Donations with PayPal →
CVE-2021-24989
The Accept Donations with PayPal WordPress plugin before 1.3.4 does not have CSRF check in place and does not ensure…
Not rated
CVE-2021-24572
The Accept Donations with PayPal WordPress plugin before 1.3.1 provides a function to create donation buttons which…
Not rated
CVE-2021-24570
The Accept Donations with PayPal WordPress plugin before 1.3.1 offers a function to create donation buttons, which…
Not rated