CVE-2022-2565

Publication date

2022-09-05 12:35:21

Family

WPScan

State

PUBLISHED

Description

The Simple Payment Donations & Subscriptions WordPress plugin before 4.2.1 does not sanitise and escape user input given in its forms, which could allow unauthenticated attackers to perform Cross-Site Scripting attacks against admins