Vulnerabilities > CVE-2021-24315 - Unspecified vulnerability in Givewp

CVSS 4.8 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

HIGH

Confidentiality impact

LOW

Integrity impact

LOW

Availability impact

NONE

network

low complexity

givewp

NVD

Published: 2021-05-17

Updated: 2024-11-21

Summary

The GiveWP – Donation Plugin and Fundraising Platform WordPress plugin before 2.10.4 did not sanitise or escape the Background Image field of its Stripe Checkout Setting and Logo field in its Email settings, leading to authenticated (admin+) Stored XSS issues.

Vulnerable Configurations

Part	Description	Count
Application	Givewp Givewp Givewp - Givewp Givewp 0.8 Givewp Givewp 0.8.5 Givewp Givewp 0.8.6 Givewp Givewp 0.9 Givewp Givewp 0.9.5 Givewp Givewp 0.9.5.1 Givewp Givewp 1.0 Givewp Givewp 1.0.1 Givewp Givewp 1.1 Givewp Givewp 1.2 Givewp Givewp 1.2.1 Givewp Givewp 1.3 Givewp Givewp 1.3.0.1 Givewp Givewp 1.3.0.2 Givewp Givewp 1.3.0.3 Givewp Givewp 1.3.0.4 Givewp Givewp 1.3.1 Givewp Givewp 1.3.1.1 Givewp Givewp 1.3.2 Givewp Givewp 1.3.3 Givewp Givewp 1.3.4 Givewp Givewp 1.3.5 Givewp Givewp 1.3.6 Givewp Givewp 1.4 Givewp Givewp 1.4.1 Givewp Givewp 1.4.2 Givewp Givewp 1.4.3 Givewp Givewp 1.4.4 Givewp Givewp 1.4.5 Givewp Givewp 1.5 Givewp Givewp 1.5.1 Givewp Givewp 1.5.2 Givewp Givewp 1.6 Givewp Givewp 1.6.1 Givewp Givewp 1.6.2 Givewp Givewp 1.6.3 Givewp Givewp 1.6.4 Givewp Givewp 1.7 Givewp Givewp 1.7.1 Givewp Givewp 1.7.2 Givewp Givewp 1.8 Givewp Givewp 1.8.1 Givewp Givewp 1.8.2 Givewp Givewp 1.8.3 Givewp Givewp 1.8.4 Givewp Givewp 1.8.5 Givewp Givewp 1.8.6 Givewp Givewp 1.8.7 Givewp Givewp 1.8.7.1 Givewp Givewp 1.8.8 Givewp Givewp 1.8.9 Givewp Givewp 1.8.10 Givewp Givewp 1.8.11 Givewp Givewp 1.8.12 Givewp Givewp 1.8.13 Givewp Givewp 1.8.14 Givewp Givewp 1.8.15 Givewp Givewp 1.8.16 Givewp Givewp 1.8.17 Givewp Givewp 1.8.18 Givewp Givewp 1.8.19 Givewp Givewp 1.9.0 Givewp Givewp 2.0.0 Givewp Givewp 2.0.1 Givewp Givewp 2.0.2 Givewp Givewp 2.0.3 Givewp Givewp 2.0.4 Givewp Givewp 2.0.5 Givewp Givewp 2.0.6 Givewp Givewp 2.0.7 Givewp Givewp 2.1.0 Givewp Givewp 2.1.1 Givewp Givewp 2.1.2 Givewp Givewp 2.1.3 Givewp Givewp 2.1.4 Givewp Givewp 2.1.5 Givewp Givewp 2.1.6 Givewp Givewp 2.1.7 Givewp Givewp 2.1.8 Givewp Givewp 2.2.0 Givewp Givewp 2.2.1 Givewp Givewp 2.2.2 Givewp Givewp 2.2.3 Givewp Givewp 2.2.4 Givewp Givewp 2.2.5 Givewp Givewp 2.2.6 Givewp Givewp 2.3.0 Givewp Givewp 2.3.1 Givewp Givewp 2.3.2 Givewp Givewp 2.4.0 Givewp Givewp 2.4.1 Givewp Givewp 2.4.2 Givewp Givewp 2.4.3 Givewp Givewp 2.4.4 Givewp Givewp 2.4.5 Givewp Givewp 2.4.6 Givewp Givewp 2.4.7 Givewp Givewp 2.5.0 Givewp Givewp 2.5.1 Givewp Givewp 2.5.2 Givewp Givewp 2.5.3 Givewp Givewp 2.5.4 Givewp Givewp 2.5.5 Givewp Givewp 2.5.6 Givewp Givewp 2.5.7 Givewp Givewp 2.5.8 Givewp Givewp 2.5.9 Givewp Givewp 2.5.10 Givewp Givewp 2.5.11 Givewp Givewp 2.5.12 Givewp Givewp 2.5.13 Givewp Givewp 2.6.0 Givewp Givewp 2.6.1 Givewp Givewp 2.6.2 Givewp Givewp 2.6.3 Givewp Givewp 2.7.0 Givewp Givewp 2.7.1 Givewp Givewp 2.7.2 Givewp Givewp 2.7.3 Givewp Givewp 2.7.4 Givewp Givewp 2.7.5 Givewp Givewp 2.8.0 Givewp Givewp 2.8.1 Givewp Givewp 2.9.0 Givewp Givewp 2.9.1 Givewp Givewp 2.9.2 Givewp Givewp 2.9.3 Givewp Givewp 2.9.4 Givewp Givewp 2.9.5 Givewp Givewp 2.9.6 Givewp Givewp 2.9.7 Givewp Givewp 2.10.0 Givewp Givewp 2.10.1 Givewp Givewp 2.10.2 Givewp Givewp 2.10.3	136

Summary

Vulnerable Configurations

References