title: GiveWP < 2.12.0 - Authenticated Stored XSS
description: The GiveWP – Donation Plugin and Fundraising Platform WordPress plugin before 2.12.0 did not escape the Donation Level setting of its Donation Forms, allowing high privilege users to use Cross-Site Scripting payloads in them.
problem types: CWE-79 Cross-site Scripting (XSS)
affected:
{
product: GiveWP – Donation Plugin and Fundraising Platform
vendor: Unknown
versions:
lessThan: 2.12.0, status: affected, version: 2.12.0, versionType: custom
}