cleantalk
Vulnerabilities and Security Researches

Elementor Stripe Payment, 2330171d2355b977f89e1cff36c18d815163ec0d

Published on
Jul 18, 2023
Research Description
Elementor Stripe Payment [pay-addons-for-elementor] < 1.2.2 WordPress Elementor Stripe Payment Plugin < 1.2.2 is vulnerable to Cross Site Scripting (XSS) Update the plugin to the latest version. Rafie Muhammad (Patchstack) discovered and reported this Cross Site Scripting (XSS) vulnerability in WordPress Elementor Stripe Payment Plugin. This could allow a malicious actor to inject malicious scripts, such as redirects, advertisements, and other HTML payloads into your website which will be executed when guests visit your site. This vulnerability has been fixed in version 1.2.2.
Affected versions
Min -, max 1.2.2.
Status
vulnerable