https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T15:45:08.599438+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2021-25099 CVE-2021-25099 — Give < 2.17.3 - Unauthenticated Reflected Cross-Site Scripting 2026-10-06T15:45:08.600605+00:00

Affected: Unknown GiveWP – Donation Plugin and Fundraising Platform

The GiveWP WordPress plugin before 2.17.3 does not sanitise and escape the form_id parameter before outputting it back in the response of an unauthenticated request via the give_checkout_login AJAX action, leading to a Reflected Cross-Site Scripting