CVE-2021-25100 | BDVDB-2026-170508 Detail

GiveWP – Donation Plugin and Fundraising Platform

Description#

The GiveWP WordPress plugin before 2.17.3 does not escape the s parameter before outputting it back in an attribute in the Donation Forms dashboard, leading to a Reflected Cross-Site Scripting

Impact#

No impact statement in the source data.

Weaknesses#

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

References#

https://plugins.trac.wordpress.org/changeset/2659032
https://wpscan.com/vulnerability/fe2c02bf-207c-43da-98bd-4c85d235de8b

Exploit#

No public exploit known

History#

Version 12022-02-21Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.