Extension WordPress
Vulnérabilités Donorbox – Free Recurring Donation Plugin and Fundraising Platform
Cette page rassemble les failles publiées pour Donorbox – Free Recurring Donation Plugin and Fundraising Platform, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Donorbox – Free Recurring Donation Plugin and Fundraising Platform
2 fiches
Donorbox – Free Recurring Donation Form <= 7.1.6 – Cross-Site Scripting
The Donorbox WordPress plugin before 7.1.7 does not sanitise and escape its Campaign URL settings before outputting it in an attribute, leading to a Stored Cross-Site Scripting issue even when the unfiltered_html capability is disallowed
*-7.1.6
7.1.7
20/04/2022
Donorbox <= 7.1.1 – Authenticated Stored Cross-Site Scripting
The Donorbox plugin for WordPress is vulnerable to Cross-Site Scripting in versions up to, and including, 7.1.1 via storing shortcodes due to insufficient input sanitization and output escaping. This makes it possible for privileged attackers to inject arbitrary…
[*, 7.1.2)
7.1.2
19/12/2019
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.