CVE-2022-50797CWE-79

Stripe Green Downloads Wordpress Plugin 2.03 Persistent XSS via Settings

Medium · published February 1, 2026

CVSS v4.0
5.1
EPSS
0%
Percentile
37.2
In the wild
Unconfirmed
What it is

Stripe Green Downloads Wordpress Plugin 2.03 contains a persistent cross-site scripting vulnerability allowing remote attackers to inject malicious scripts in button label fields. Attackers can exploit input parameters to execute arbitrary scripts, potentially leading to session hijacking and application module manipulation.

The record
Technical detail
CVSS v4.0
5.1 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N
EPSS
0.00440 · 37.2th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2026-02-01T12:15Z
EPSS history
Timeline
  • 01 FEB 12:15Z
    Stripe Green Downloads Wordpress Plugin 2.03 Persistent XSS via Settings
    cvelistv5