CVE-2026-73357

MediumCVSS 6.5

Published: 13/08/2026(UTC)Updated: 14/08/2026(UTC)Translated: 13/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.16%

6th percentile - higher than 6% of all known CVEs

Summary

Donor Cross Site Scripting (XSS) in GiveWP < 4.16.6 versions.

Risk Assessment

The risk is the possibility of executing malicious scripts in the victim's browser, potentially leading to data theft, session hijacking, or other attacks.

Recommendation

It is recommended to update the GiveWP plugin to version 4.16.6 or later, which includes a fix for this vulnerability.

Original NVD description (English source)

Donor Cross Site Scripting (XSS) in GiveWP < 4.16.6 versions.