Non notée
CVE-2021-24815 The Accept Donations with PayPal WordPress plugin before 1.3.2 does not escape the Amount Menu Name field of created…
Description
The Accept Donations with PayPal WordPress plugin before 1.3.2 does not escape the Amount Menu Name field of created Buttons, which could allow a high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Accept Donations with PayPal 1.3 | premières → < 1.3.2 | 1.3.2 |
Autres CVE de Accept Donations with PayPal
Les 4 CVE de Accept Donations with PayPal →
CVE-2021-24989
The Accept Donations with PayPal WordPress plugin before 1.3.4 does not have CSRF check in place and does not ensure…
Non notée
CVE-2021-24572
The Accept Donations with PayPal WordPress plugin before 1.3.1 provides a function to create donation buttons which…
Non notée
CVE-2021-24570
The Accept Donations with PayPal WordPress plugin before 1.3.1 offers a function to create donation buttons, which…
Non notée