CVE-2024-6021: Donation Block for PayPal <= 2.1.0 - Unauthenticated Stored XSS
The Donation Block For PayPal WordPress plugin through 2.1.0 does not sanitise and escape form submissions, leading to a stored cross-site scripting vulnerability
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-6021?
CVE-2024-6021 has been classified as a stored cross-site scripting vulnerability with a medium severity level.
How do I fix CVE-2024-6021?
To fix CVE-2024-6021, update the Donation Block for PayPal plugin to the latest version beyond 2.1.0, which addresses the sanitization issues.
What impact does CVE-2024-6021 have on my website?
CVE-2024-6021 can allow attackers to inject malicious scripts into stored user submissions, potentially compromising user sessions and sensitive data.
Which versions of the Donation Block for PayPal are affected by CVE-2024-6021?
CVE-2024-6021 affects the Donation Block for PayPal plugin versions up to and including 2.1.0.
Is the stored cross-site scripting in CVE-2024-6021 easy to exploit?
Yes, the stored cross-site scripting vulnerability in CVE-2024-6021 can be easily exploited by attackers with access to submit forms on the affected plugin.