Vulnerability Details CVE-2022-3986
The WP Stripe Checkout WordPress plugin before 1.2.2.21 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 40.0%
CVSS Severity
CVSS v3 Score 5.4
Products affected by CVE-2022-3986
-
cpe:2.3:a:noorsplugin:wp_stripe_checkout:-
-
cpe:2.3:a:noorsplugin:wp_stripe_checkout:1.0.1
-
cpe:2.3:a:noorsplugin:wp_stripe_checkout:1.0.2
-
cpe:2.3:a:noorsplugin:wp_stripe_checkout:1.0.3
-
cpe:2.3:a:noorsplugin:wp_stripe_checkout:1.0.4
-
cpe:2.3:a:noorsplugin:wp_stripe_checkout:1.0.5
-
cpe:2.3:a:noorsplugin:wp_stripe_checkout:1.0.6
-
cpe:2.3:a:noorsplugin:wp_stripe_checkout:1.0.7
-
cpe:2.3:a:noorsplugin:wp_stripe_checkout:1.0.8
-
cpe:2.3:a:noorsplugin:wp_stripe_checkout:1.0.9
-
cpe:2.3:a:noorsplugin:wp_stripe_checkout:1.1.0
-
cpe:2.3:a:noorsplugin:wp_stripe_checkout:1.1.1
-
cpe:2.3:a:noorsplugin:wp_stripe_checkout:1.1.2
-
cpe:2.3:a:noorsplugin:wp_stripe_checkout:1.1.3
-
cpe:2.3:a:noorsplugin:wp_stripe_checkout:1.1.4
-
cpe:2.3:a:noorsplugin:wp_stripe_checkout:1.1.5
-
cpe:2.3:a:noorsplugin:wp_stripe_checkout:1.1.6
-
cpe:2.3:a:noorsplugin:wp_stripe_checkout:1.1.7
-
cpe:2.3:a:noorsplugin:wp_stripe_checkout:1.1.8
-
cpe:2.3:a:noorsplugin:wp_stripe_checkout:1.1.9
-
cpe:2.3:a:noorsplugin:wp_stripe_checkout:1.2.0
-
cpe:2.3:a:noorsplugin:wp_stripe_checkout:1.2.1
-
cpe:2.3:a:noorsplugin:wp_stripe_checkout:1.2.2
-
cpe:2.3:a:noorsplugin:wp_stripe_checkout:1.2.2.1
-
cpe:2.3:a:noorsplugin:wp_stripe_checkout:1.2.2.10
-
cpe:2.3:a:noorsplugin:wp_stripe_checkout:1.2.2.11
-
cpe:2.3:a:noorsplugin:wp_stripe_checkout:1.2.2.12
-
cpe:2.3:a:noorsplugin:wp_stripe_checkout:1.2.2.13
-
cpe:2.3:a:noorsplugin:wp_stripe_checkout:1.2.2.14
-
cpe:2.3:a:noorsplugin:wp_stripe_checkout:1.2.2.15
-
cpe:2.3:a:noorsplugin:wp_stripe_checkout:1.2.2.16
-
cpe:2.3:a:noorsplugin:wp_stripe_checkout:1.2.2.17
-
cpe:2.3:a:noorsplugin:wp_stripe_checkout:1.2.2.18
-
cpe:2.3:a:noorsplugin:wp_stripe_checkout:1.2.2.19
-
cpe:2.3:a:noorsplugin:wp_stripe_checkout:1.2.2.2
-
cpe:2.3:a:noorsplugin:wp_stripe_checkout:1.2.2.20
-
cpe:2.3:a:noorsplugin:wp_stripe_checkout:1.2.2.3
-
cpe:2.3:a:noorsplugin:wp_stripe_checkout:1.2.2.4
-
cpe:2.3:a:noorsplugin:wp_stripe_checkout:1.2.2.5
-
cpe:2.3:a:noorsplugin:wp_stripe_checkout:1.2.2.6
-
cpe:2.3:a:noorsplugin:wp_stripe_checkout:1.2.2.7
-
cpe:2.3:a:noorsplugin:wp_stripe_checkout:1.2.2.8
-
cpe:2.3:a:noorsplugin:wp_stripe_checkout:1.2.2.9