Aller au contenu
Se connecter
5.1 Moyenne

CVE-2021-47983 WordPress Plugin Stripe Payments before 2.0.40 contains a stored cross-site scripting vulnerability that allows…

Description

WordPress Plugin Stripe Payments before 2.0.40 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the AcceptStripePayments-settings[currency_code] parameter. Attackers can submit POST requests to /wp-admin/options.php with script payloads in the currency_code field to execute arbitrary JavaScript in administrator browsers when settings are viewed.

Produits et versions touchés

Produit Versions touchées Corrigé en
Accept Stripe Payments 2.0 premières → < 2.0.40 2.0.40

Autres CVE de Accept Stripe Payments

Les 2 CVE de Accept Stripe Payments →
CVE-2024-7353 The Accept Stripe Payments plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's… 5.4 Moyenne
Suivre cette CVE