Code Injection Vulnerability in Stripe Payments

CVE-2023-48285

5.3MEDIUM

Key Information

Vendor: Tips And Tricks Hq
Status: Stripe Payments
Vendor: CVE Published:; 4 June 2024

Summary

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Tips and Tricks HQ Stripe Payments allows Code Injection.This issue affects Stripe Payments: from n/a through 2.0.79.

Affected Version(s)

Stripe Payments <= 2.0.79

CVSS V3.1

Score:

5.3

Severity:

MEDIUM

Confidentiality:

None

Integrity:

Low

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Timeline

Vulnerability published.
Jun 4, 2024
Vulnerability Reserved.
Nov 13, 2023

Collectors

NVD DatabaseMitre Database

Credit

Joshua Chan (Patchstack Alliance)