Vulnerability · Published Feb 1, 2026 · Assigned by VulnCheck
CVE-2022-50797Stripe Green Downloads Wordpress Plugin 2.03 Persistent XSS via Settings
Medium 6.4
In plain English
A medium-severity cross-site scripting in Stripe Green Downloads from halfdata. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 38% of all known vulnerabilities).
Severity (CVSS 3.1)6.4Medium
Exploit odds (30 days)0.4%top 62.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
Stripe Green Downloads Wordpress Plugin 2.03 contains a persistent cross-site scripting vulnerability allowing remote attackers to inject malicious scripts in button label fields. Attackers can exploit input parameters to execute arbitrary scripts, potentially leading to session hijacking and application module manipulation.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| halfdata | Stripe Green Downloads | 2.03 |
Weakness: CWE-79 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
References
- Vulnerability Lab Advisory exploit
- Product Homepage product
- VulnCheck Advisory: Stripe Green Downloads Wordpress Plugin 2.03 Persistent XSS via Settings third-party-advisory