CVE-2021-24815

4.8 mediumEPSS 0.6%

Medium (4.8) in wpplugin accept donations with paypal. EPSS 0.6% chance of exploitation in the next 30 days.

The Accept Donations with PayPal WordPress plugin before 1.3.2 does not escape the Amount Menu Name field of created Buttons, which could allow a high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.

Severity

CVSS 3.1

4.8 medium

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 49% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2021-11-17
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

wpplugin:accept_donations_with_paypal

References

https://wpscan.com/vulnerability/08f4ebf5-6bbe-4fb0-a9d2-c8a994afe39b
https://wpscan.com/vulnerability/08f4ebf5-6bbe-4fb0-a9d2-c8a994afe39b

Check your stack JSON