CVE-2022-2194

CVE-2022-2194: Accept Stripe Payments < 2.0.64 - Admin+ Stored Cross-Site Scripting

Vendor Unknown

Product Accept Stripe Payments

Weakness CWE-79 · XSS

Published July 17, 2022

Last update August 3, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The Accept Stripe Payments WordPress plugin before 2.0.64 does not sanitize and escape some of its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.

Key dates

02Disclosure timeline

July 17, 2022 CVE published

August 3, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-2194 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/79.html

Related vulnerabilities

04Related CVE

CVE-2022-47414 CVE-2022-44629 WordPress Catalyst Connect Zoho CRM Client Portal Plugin <= 2.0.0 is vulnerable to Cross Site Scripting (XSS) CVE-2025-58647 WordPress Simple Restaurant Menu Plugin <= 1.2 - Cross Site Scripting (XSS) Vulnerability CVE-2024-24570 Statamic account takeover via XSS and password reset link CVE-2024-0554 Cross-site scripting (XSS) vulnerability on WIC1200