WordPress plugin Accept Donations with PayPal & Stripe 跨站脚本漏洞

2025-02-26 Accept Donations with PayPal & Stripe PoC No

Description

WordPress和WordPress plugin都是WordPress基金会的产品。WordPress是一套使用PHP语言开发的博客平台。该平台支持在PHP和MySQL的服务器上架设个人博客网站。WordPress plugin是一个应用插件。 WordPress plugin Accept Donations with PayPal & Stripe 1.4.4版本及之前版本存在跨站脚本漏洞，该漏洞源于对输入清理和输出转义不足。攻击者利用该漏洞可以在用户点击链接时执行任意Web脚本。

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/easy-paypal-donation/accept-donations-with-paypal-stripe-144-reflected-cross-site-scripting
https://nvd.nist.gov/vuln/detail/CVE-2024-13728
https://cve.imfht.com/detail/CVE-2024-13728
https://patchstack.com/database/wordpress/plugin/easy-paypal-donation/vulnerability/wordpress-accept-donations-with-paypal-plugin-1-3-reflected-cross-site-scripting-xss-vulnerability
https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/easy-paypal-donation/accept-donations-with-paypal-13-reflected-cross-site-scripting-via-page
https://cve.imfht.com/detail/CVE-2024-13728?lang=en
https://www.knowsafe.com/ti/info/0/993711
https://cve.imfht.com/product/Accept%20Donations%20with%20PayPal%20&%20Stripe

Description

PoC

References

Related Vulnerabilities