WP Clinic
Log in Sign up

CVE · Medium

CVE-2021-47983 — Accept Stripe Payments [stripe-payments] <= 2.0.39 (unfixed)

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2021-47983 Accept Stripe Payments [stripe-payments] <= 2.0.39 (unfixed) Medium 6.4 < 2.0.39 2.0.39 2026-06-08

CVE-2021-47983

WordPress Plugin Stripe Payments 2.0.39 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the AcceptStripePayments-settings[currency_code] parameter. Attackers can submit POST requests to /wp-admin/options.php with script payloads in the currency_code field to execute arbitrary JavaScript in administrator browsers when settings are viewed.

Source: CVE.org

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.