← Database

CVE-2022-2565

HIGH CVSS: 7.2 Published: 2022-09-05 Modified: 2026-06-17

Description

The Simple Payment Donations & Subscriptions WordPress plugin before 4.2.1 does not sanitise and escape user input given in its forms, which could allow unauthenticated attackers to perform Cross-Site Scripting attacks against admins

Affected Platforms

Paymattic Simple Payment Donations \& Subscriptions

Weakness Type

CWE-79

References