← Back

Donorbox

donorbox

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Donorbox
donorbox
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2022-1396
1Donorbox
1Donorbox
Jun 17, 2026
Apr 25, 2022
N/A· v4
4.8 MEDIUM· v3
3.5 LOW· v2
The Donorbox WordPress plugin before 7.1.7 does not sanitise and escape its Campaign URL settings before outputting it in an attribute, leading to a Stored Cross-Site Scripting issue even when the unfiltered_html capabil...Show more
The Donorbox WordPress plugin before 7.1.7 does not sanitise and escape its Campaign URL settings before outputting it in an attribute, leading to a Stored Cross-Site Scripting issue even when the unfiltered_html capability is disallowedShow less