high7.2
CVE-2022-2565
The Simple Payment Donations & Subscriptions WordPress plugin before 4.2.1 does not sanitise and escape user input given in its forms, which could allow unauth…
Impact
The Simple Payment Donations & Subscriptions WordPress plugin before 4.2.1 does not sanitise and escape user input given in its forms, which could allow unauthenticated attackers to perform Cross-Site Scripting attacks against admins
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Paymattic | Simple Payment Donations \& Subscriptions | before 4.2.1 |