Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-4042
HistoryDec 26, 2022 - 1:15 p.m.

Cross site scripting

2022-12-2613:15:00
PRIOn knowledge base
www.prio-n.com
2
paytium mollie plugin
cross-site scripting
stored xss
wordpress
security vulnerability
unfiltered html
multisite setup

0.001 Low

EPSS

Percentile

23.3%

The Paytium: Mollie payment forms & donations WordPress plugin before 4.3.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).

CPENameOperatorVersion
paytiumle4.3.6

0.001 Low

EPSS

Percentile

23.3%

Related for PRION:CVE-2022-4042