CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Tips and Tricks HQ Stripe Payments allows Code Injection.This issue affects Stripe Payments: from n/a through 2.0.79.
Explanation of Vulnerability in Simple Terms
The Stripe Payments plugin for WordPress contains an input validation flaw that allows attackers to inject malicious content into the site without authentication. An attacker can craft a request to modify data or inject code that affects site integrity. The vulnerability requires no user interaction and can be exploited remotely. Update to a version newer than 2.0.79.
What an attacker can do
Inject malicious content or modify data on the site without needing to log in.
Potential impact on your site
Site content or functionality could be altered by an attacker; potential for defacement or malware injection.
Conditions required to exploit
Network access to the site; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
