CVSS: 7.1EPSS: 0%CPEs: 1EXPL: 0CVE-2023-40664 – WordPress Donations Made Easy – Smart Donations Plugin <= 4.0.12 is vulnerable to Cross Site Scripting (XSS)
https://notcve.org/view.php?id=CVE-2023-40664
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in RedNao Donations Made Easy – Smart Donations plugin <= 4.0.12 versions. Vulnerabilidad de Cross-Site Scripting (XSS) Reflejada No Autenticada en el complemento RedNao Donations Made Easy – Smart Donations en versiones <= 4.0.12. The Donations Made Easy – Smart Donations plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the rednao_smart_donations_save_form_values() function called via a nopriv AJAX in versions up to, and including, 4.0.12 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. • https://patchstack.com/database/vulnerability/smart-donations/wordpress-donations-made-easy-smart-donations-plugin-4-0-12-cross-site-scripting-xss-vulnerability?_s_id=cve • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 0CVE-2023-38475 – Donations Made Easy – Smart Donations <= 4.0.12 - Missing Authorization
https://notcve.org/view.php?id=CVE-2023-38475
The Donations Made Easy – Smart Donations plugin for WordPress is vulnerable to unauthorized actions due to a missing capability check on an unknown function in versions up to, and including, 4.0.12. This makes it possible for authenticated attackers, with subscriber-level access and above, to perform an unauthorized action. • CWE-862: Missing Authorization •
CVSS: 7.1EPSS: 0%CPEs: 1EXPL: 0CVE-2023-32603 – WordPress Donations Made Easy – Smart Donations Plugin <= 4.0.12 is vulnerable to Cross Site Scripting (XSS)
https://notcve.org/view.php?id=CVE-2023-32603
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in RedNao Donations Made Easy – Smart Donations plugin <= 4.0.12 versions. Vulnerabilidad de Cross-Site Scripting (XSS) Reflejada en el plugin Donations Made Easy - Smart Donations de RedNao. The Donations Made Easy – Smart Donations plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 4.0.12 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. • https://patchstack.com/database/vulnerability/smart-donations/wordpress-donations-made-easy-smart-donations-plugin-4-0-12-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •