CVE:CVE-2019-9909
CNNVD:CNNVD-201903-828
WordPress Donation Plugin and Fundraising Platform插件2.3.1之前版本中的wp-admin/edit.php文件存在跨站脚本漏洞。远程攻击者可借助‘csv’参数利用该漏洞在该插件的上下文中执行JavaScript代码。
solution:Upgrade givewp givewp to a higher version than 2.3.1,and avoid the version (,2.3.1)