Medium severity5.4NVD Advisory· Published Dec 19, 2022· Updated Jun 17, 2026

CVE-2022-3983

Description

The Checkout for PayPal WordPress plugin before 1.0.14 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

PayPal/Checkout for PayPal WordPress plugindescription
WordPress/Checkout For Paypalllm-fuzzy
Range: <1.0.14
Package: https://wordpress.org/plugins/checkout-for-paypal

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/0b48bbd6-7c77-44b8-a5d6-34e4a0747cf1nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.351
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000