These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
Unauthenticated Cross Site Scripting (XSS) in Stripe Payments <= 2.1.2 versions. This high-severity vulnerability requires verification of exposure and potential impact, focusing on systems using affected versions. Defenders and security teams should assess potential exposure and prioritize verification and remediation efforts. The CVE record and NVD entry provide limited information, with the NVD entry c [truncated]
CVE-2021-47983 is a stored cross-site scripting (XSS) vulnerability in WordPress Plugin Stripe Payments version 2.0.39. The vulnerability allows authenticated attackers to inject malicious scripts through the `AcceptStripePayments-settings[currency_code]` parameter. Attackers can submit POST requests to `/wp-admin/options.php` with script payloads in the `currency_code` field to execute arbitrary JavaScri [truncated]
The Simple Shopping Cart plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wpsc_display_product' shortcode in all versions up to, and including, 5.2.4. This vulnerability exists due to insufficient input sanitization and output escaping on user-supplied attributes. Authenticated attackers with contributor-level access and above can inject arbitrary web scripts in pages th [truncated]