cleantalk
Vulnerabilities and Security Researches

Subscriptions & Memberships for PayPal, 34ea00d1-3f45-4550-9d22-5a966e9c01b9

Published on
-
Research Description
Subscriptions &amp; Memberships for PayPal [subscriptions-memberships-for-paypal] < 1.1.3 Multiple Plugins from WPPlugin - Reflected Cross-Site Scripting via page Parameter The plugins do not escape a page parameter before outputting it back in an attribute in various admin pages, leading to Reflected Cross-Site Scripting issues. The issues were reported to the vendor on August 10th, 2021
Affected versions
max 1.1.3.
Status
vulnerable