An unauthenticated Cross Site Scripting (XSS) vulnerability exists in WP Crowdfunding versions up to and including 2.2.2. This vulnerability allows attackers to inject malicious scripts without authentication, potentially impacting confidentiality, integrity, and availability.