Medium severity6.4NVD Advisory· Published Feb 1, 2026· Updated Apr 15, 2026

CVE-2022-50797

Description

Stripe Green Downloads Wordpress Plugin 2.03 contains a persistent cross-site scripting vulnerability allowing remote attackers to inject malicious scripts in button label fields. Attackers can exploit input parameters to execute arbitrary scripts, potentially leading to session hijacking and application module manipulation.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Stripe Green Downloadsinferred
Range: =2.03
Package: https://wordpress.org/plugins/stripe-green-downloads
Stripe/Stripe CLIllm-fuzzy
Range: <=2.03

Patches

Vulnerability mechanics

References

halfdata.com/green-downloads/stripe/nvd
www.vulncheck.com/advisories/stripe-green-downloads-wordpress-plugin-persistent-xss-via-settingsnvd
www.vulnerability-lab.com/get_content.phpnvd

News mentions

No linked articles in our index yet.

cvss	0.416
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000