Medium severity5.4NVD Advisory· Published Aug 23, 2021· Updated Jun 17, 2026

CVE-2021-24531

Description

The Charitable – Donation Plugin WordPress plugin before 1.6.51 is affected by an authenticated stored cross-site scripting vulnerability which was found in the add donation feature.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Wpcharitable/Charitable
cpe:2.3:a:wpcharitable:charitable:*:*:*:*:*:wordpress:*:*
Range: <1.6.51
WordPress/Charitable – Donation Plugindescription
WordPress/Charitablellm-fuzzy
Range: <1.6.51
Package: https://wordpress.org/plugins/charitable

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/a5837621-ee6e-4876-9f65-82658fc0341fnvdThird Party Advisory
www.wpcharitable.com/release-notes-1-6-51/nvdRelease NotesVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.351
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000