CVE-2021-47983 is a stored cross-site scripting (XSS) vulnerability in WordPress Plugin Stripe Payments version 2.0.39. The vulnerability allows authenticated attackers to inject malicious scripts through the `AcceptStripePayments-settings[currency_code]` parameter. Attackers can submit POST requests to `/wp-admin/options.php` with script payloads in the `currency_code` field to execute arbitrary JavaScri [truncated]
The Simple Shopping Cart plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wpsc_display_product' shortcode in all versions up to, and including, 5.2.4. This vulnerability exists due to insufficient input sanitization and output escaping on user-supplied attributes. Authenticated attackers with contributor-level access and above can inject arbitrary web scripts in pages th [truncated]
