CVE-2021-24524 | BDVDB-2026-159293 Detail

GiveWP – Donation Plugin and Fundraising Platform

Description#

The GiveWP – Donation Plugin and Fundraising Platform WordPress plugin before 2.12.0 did not escape the Donation Level setting of its Donation Forms, allowing high privilege users to use Cross-Site Scripting payloads in them.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

References#

https://wpscan.com/vulnerability/5a4774ec-c0ee-4c6b-92a6-fa10821ec336

Exploit#

No public exploit known

History#

Version 12021-08-23Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.