TI-2022-02369 CVE-2022-2565 · GHSA-phr2-m496-gqwf
Best Payments Plugin for WP < 4.2.1 - Unauthenticated Stored Cross-Site Scripting
Priority LOW 33
The Simple Payment Donations & Subscriptions WordPress plugin before 4.2.1 does not sanitise and escape user input given in its forms, which could allow unauthenticated attackers to perform Cross-Site Scripting attacks a…