Vulnerabilities > Donation Thermometer Project

DATE	CVE	VULNERABILITY TITLE	RISK
2022-10-03	CVE-2022-3128	Cross-site Scripting vulnerability in Donation Thermometer Project Donation Thermometer The Donation Thermometer WordPress plugin before 2.1.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) network low complexity donation-thermometer-project CWE-79	4.8

Vulnerabilities > Donation Thermometer Project {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Vulnerabilities","item":"https://cyber.vumetric.com/vulns/"},{"@type":"ListItem","position":2,"name":"Donation Thermometer Project"}]}