CVE-2022-50797 – Stripe Green Downloads Wordpress Plugin 2.03 Persistent XSS via Settings

CVE ID : CVE-2022-50797

Published : Feb. 1, 2026, 12:15 p.m. | 59 minutes ago

Description : Stripe Green Downloads Wordpress Plugin 2.03 contains a persistent cross-site scripting vulnerability allowing remote attackers to inject malicious scripts in button label fields. Attackers can exploit input parameters to execute arbitrary scripts, potentially leading to session hijacking and application module manipulation.

Severity: 6.4 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…