cleantalk
Vulnerabilities and Security Researches

Simple Payment Donations & Subscriptions Plugin by Paymattic – Best Payments Plugin for WP, CVE-2022-2565

CVE, Research URL

CVE-2022-2565

Published on
Sep 05, 2022
Research Description
The Simple Payment Donations & Subscriptions WordPress plugin before 4.2.1 does not sanitise and escape user input given in its forms, which could allow unauthenticated attackers to perform Cross-Site Scripting attacks against admins
Affected versions
max 4.2.1.
Status
vulnerable