CVE-2019-15317 - The give plugin before 2.4.7 for WordPress has XSS via a donor name · CoreCVE

Back Back to CVE browser

MEDIUM

The give plugin before 2.4.7 for WordPress has XSS via a donor name

Published Aug 22, 2019

5.4

MEDIUM

CVSS 3.0

EPSS 1.19%

Description

The give plugin before 2.4.7 for WordPress has XSS via a donor name.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (4)

https://blog.sucuri.net/2019/05/wordpress-plugin-give-stored-xss-for-donors.html
x_refsource_MISCExploitThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-6318
Advisory
https://wordpress.org/plugins/give/#developers
x_refsource_MISCRelease Notes
https://wpvulndb.com/vulnerabilities/9584
x_refsource_MISCThird Party Advisory

Link	Providers	Tags
https://blog.sucuri.net/2019/05/wordpress-plugin-give-stored-xss-for-donors.html		x_refsource_MISCExploitThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-6318		Advisory
https://wordpress.org/plugins/give/#developers		x_refsource_MISCRelease Notes
https://wpvulndb.com/vulnerabilities/9584		x_refsource_MISCThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Aug 22, 2019

Updated Aug 5, 2024

Reserved Aug 21, 2019

Link CVE-2019-15317

CISA Vulnrichment

Updated n/a

Status Modified

Modified Jun 17, 2026

Link CVE-2019-15317

Severity n/a

Public date n/a

Links CVE-2019-15317

Assigner mitre

Published Aug 22, 2019

Updated Aug 5, 2024

Exploited since n/a

Link EUVD-2019-6318