Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-24524

GiveWP < 2.12.0 - Authenticated Stored XSS

Description

The GiveWP – Donation Plugin and Fundraising Platform WordPress plugin before 2.12.0 did not escape the Donation Level setting of its Donation Forms, allowing high privilege users to use Cross-Site Scripting payloads in them.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown GiveWP – Donation Plugin and Fundraising Platform

  • 2.12.0 to < 2.12.0affected

References