Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
WordPress Plugin Stripe Payments before 2.0.40 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the AcceptStripePayments-settings[currency_code] parameter. Attackers can submit POST requests to /wp-admin/options.php with script payloads in the currency_code field to execute arbitrary JavaScript in administrator browsers when settings are viewed.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2021-47983 WordPress Plugin Stripe Payments 2.0.39 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through t… https://www.cve.org/CVERecord?id=CVE-2021-47983
Post summary
A stored XSS flaw in WordPress plugin Stripe Payments 2.0.39 allows authenticated users to inject malicious scripts.
🚨*CVE* CVE-2021-47983 WordPress Plugin Stripe Payments 2.0.39 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through t… https://www.cve.org/CVERecord?id=CVE-2021-47983 ----- Traducción: CVE-2021-47983 Wor… http://infoflow.cloud`
Post summary
The tweet announces a stored XSS vulnerability (CVE-2021-47983) in WordPress Stripe Payments plugin and provides a link to the CVE record, but does not mention PoC, exploit code, active exploitation, or patches.