CVE-2022-2565

HIGH

Best Payments Plugin for WP < 4.2.1 - Unauthenticated Stored Cross-Site Scripting

Title source: CVE List
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2022-2565 has a selected CVSS score of 7.2 (high); EIP currently links 1 curated repository PoC.

Description

The Simple Payment Donations & Subscriptions WordPress plugin before 4.2.1 does not sanitise and escape user input given in its forms, which could allow unauthenticated attackers to perform Cross-Site Scripting attacks against admins

Description source: CVE List

Exploitation context

Available material

Curated repository PoCs
1

Affected products and versions

1
ProductSourceVersion range

Simple Payment Donations & Subscriptions Plugin by Paymattic – Best Payments Plugin for WP

CVE List4.2.1 to < 4.2.1affected

Proofs of concept

1

Curated repository PoCs

GitHubCVE-2022-2565Curated repository PoCby yubsy112Not analyzed1 file

Python · 554 B

GitHub
PoC details

References

2