| Package | Affected versions | Patched versions |
|---|---|---|
| givewp | < 2.10.4 | 2.10.4 |
The GiveWP – Donation Plugin and Fundraising Platform WordPress plugin before 2.10.4 did not sanitise or escape the Background Image field of its Stripe Checkout Setting and Logo field in its Email settings, leading to authenticated (admin+) Stored XSS issues.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free