PT-2026-5566 · WordPress · Stripe Green Downloads

CVE-2022-50797 · Publicado 2026-02-01 · Atualizado 2026-02-01

Positive Technologies (AI Summary)

CVSS v3.1

6.4

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Stripe Green Downloads Wordpress Plugin version 2.03

Description The Stripe Green Downloads Wordpress Plugin version 2.03 contains a persistent cross-site scripting issue. This allows remote attackers to inject malicious scripts into button label fields. Attackers can exploit input parameters to execute arbitrary scripts, potentially leading to session hijacking and application module manipulation.

Recommendations Update to a newer version that contains a fix for this vulnerability.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2022-50797

Produtos afetados

Stripe Green Downloads

Referências · 7

• 🔥 https://vulnerability-lab.com/get_content.php?id=2287 · Exploit
• https://vulncheck.com/advisories/stripe-green-downloads-wordpress-plugin-persistent-xss-via-settings · Nota
• https://t.me/cveNotify/150510 · Publicação no Telegram
• https://twitter.com/CVEnew/status/2017954076680724626 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2022-50797 · Nota de Segurança
• https://t.me/CVEtracker/43418 · Publicação no Telegram
• https://halfdata.com/green-downloads/stripe · Nota