Beveiligingsadvies

CVE-2021-47983

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-06-08 01:55:26

Laatst bijgewerkt 2026-08-27 15:03:08

Toegewezen door VulnCheck

CVSS-score 6.4

Status PUBLISHED

Beschrijving

WordPress Plugin Stripe Payments before 2.0.40 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the AcceptStripePayments-settings[currency_code] parameter. Attackers can submit POST requests to /wp-admin/options.php with script payloads in the currency_code field to execute arbitrary JavaScript in administrator browsers when settings are viewed.

← Alle CVE's bekijken Bekijk op cve.org ↗