cleantalk
Vulnerabilities and Security Researches

Double the Donation – A matching gift plug-in to help your fundraising efforts, CVE-2025-57929

CVE, Research URL

CVE-2025-57929

Published on
Sep 23, 2025
Research Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in kanwei_doublethedonation Double the Donation double-the-donation allows Stored XSS.This issue affects Double the Donation: from n/a through <= 2.0.0.
Affected versions
max 3.0.0.
Status
vulnerable