QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2021-24524

Back to search

CVE-2021-24524

Published: Aug 23, 2021

Modified: Aug 3, 2024

PUBLISHED

Description

The GiveWP – Donation Plugin and Fundraising Platform WordPress plugin before 2.12.0 did not escape the Donation Level setting of its Donation Forms, allowing high privilege users to use Cross-Site Scripting payloads in them.

VendorProductVersions

Unknown

GiveWP – Donation Plugin and Fundraising Platform

affected
2.12.0 - < 2.12.0

Weaknesses (CWE)

CWE-79

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now