CVE-2024-7353

The Accept Stripe Payments plugin for WordPress contains a security flaw in its accept_stripe_payment_ng shortcode, which allows malicious users with contributor-level access or higher to introduce unauthorized code into the site's pages through unvalidated attributes passed from authenticated users. This vulnerability is present in all versions of the plugin up to and including 2.0.86, enabling attackers to inject arbitrary web scripts that will be executed when accessed by other users.

Based on public CVE data (MITRE/NVD).