https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 13:59:52 +0000 https://cve.radiocsirt.org/vuln/cve-2021-24369 <p><strong>Affected:</strong> AyeCode Ltd WordPress Payments Plugin | GetPaid</p> <p>In the GetPaid WordPress plugin before 2.3.4, users with the contributor role and above can create a new Payment Form, however the Label and Help Text input fields were not getting sanitized properly. So it was possible to inject malicious content such as img tags, leading to a Stored Cross-Site Scripting issue which is triggered when the form will be edited, for example when an admin reviews it and could lead to privilege escalation.</p> <p><strong>Affected:</strong> AyeCode Ltd WordPress Payments Plugin | GetPaid</p> <p>In the GetPaid WordPress plugin before 2.3.4, users with the contributor role and above can create a new Payment Form, however the Label and Help Text input fields were not getting sanitized properly. So it was possible to inject malicious content such as img tags, leading to a Stored Cross-Site Scripting issue which is triggered when the form will be edited, for example when an admin reviews it and could lead to privilege escalation.</p> https://cve.radiocsirt.org/vuln/cve-2021-24369