CVE-2022-2565
05.09.2022, 13:15
The Simple Payment Donations & Subscriptions WordPress plugin before 4.2.1 does not sanitise and escape user input given in its forms, which could allow unauthenticated attackers to perform Cross-Site Scripting attacks against admins
| Vendor | Product | Version |
|---|---|---|
| paymattic | simple_payment_donations_\&_subscriptions | 𝑥 < 4.2.1 |
𝑥
= Vulnerable software versions