title: GiveWP < 2.10.0 - Reflected Cross Site Scripting (XSS)
description: The GiveWP – Donation Plugin and Fundraising Platform WordPress plugin before 2.10.0 was affected by a reflected Cross-Site Scripting vulnerability inside of the administration panel, via the 's' GET parameter on the Donors page.
problem types: CWE-79 Cross-site Scripting (XSS)
affected:
{
product: GiveWP – Donation Plugin and Fundraising Platform
vendor: GiveWP
versions:
lessThan: 2.4.0*, status: affected, version: 2.4.0, versionType: custom
lessThan: 2.10.0, status: affected, version: 2.10.0, versionType: custom
}