CVE-2025-39562 WordPress Payment Form for PayPal Pro plugin <= 1.1.72 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in codepeople Payment Form for PayPal Pro payment-form-for-paypal-pro allows Stored XSS.This issue affects Payment Form for PayPal Pro: from n/a through = 1.1.72...

CVE-2025-39562 WordPress Payment Form for PayPal Pro plugin <= 1.1.72 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in codepeople Payment Form for PayPal Pro payment-form-for-paypal-pro allows Stored XSS.This issue affects Payment Form for PayPal Pro: from n/a through = 1.1.72...

CVE-2025-39562

CVE-2025-39562 concerns the WordPress plugin Payment Form for PayPal Pro (codepeople) with a stored XSS vulnerability due to improper input neutralization during web page generation. Public records reference affected versions: 1.1.72 and earlier. Red Hat and CVE databases confirm the flaw and lin...

WordPress Payment Form for PayPal Pro plugin <= 1.1.72 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Doan Dinh Van / Fore-Z co.ltd in WordPress Plugin Payment Form for PayPal Pro versions = 1.1.72...

WordPress plugin Payment Form for PayPal Pro 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

PT-2025-17183 · Codepeople · Codepeople Payment Form For Paypal Pro

Name of the Vulnerable Software and Affected Versions: codepeople Payment Form for PayPal Pro versions 1.1.72 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that ...

WordPress Checkout for PayPal plugin <= 1.0.38 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by muhammad yudha in WordPress Plugin Checkout for PayPal versions = 1.0.38...

CVE-2025-39572

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Noor Alam Checkout for PayPal checkout-for-paypal allows Stored XSS.This issue affects Checkout for PayPal: from n/a through = 1.0.38...

CVE-2025-39572

CVE-2025-39572 : Stored XSS in WordPress plugin “Checkout for PayPal” (Noor Alam) due to improper neutralization of input during web page generation. Affected versions: Checkout for PayPal from n/a through 1.0.38. Root cause: input handling flaw that allows arbitrary script injection into generat...

CVE-2025-39572 WordPress Checkout for PayPal plugin <= 1.0.38 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Noor Alam Checkout for PayPal checkout-for-paypal allows Stored XSS.This issue affects Checkout for PayPal: from n/a through = 1.0.38...

WordPress plugin Checkout for PayPal 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

Malicious code in invoicesettings-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3de3a7f2639414d0e6ff7a0993317695868f6538efb3c2e2e32fae55dac833c6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in risklmtndecisionserv-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e74194f9f096e1481a2e12c9ce0ba2285cf2eb7fe3480e448ed357d2bfeb486 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in invoicetemplate-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0040946fd67ce8ddd6e93a9a31d2bdfc1ba57b40874f62c2b033f3d2be5a5888 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in at-validation-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 073941142afe6289331b83f586f09f0fc6d24a27aa0b14a392fd7ec429658e9e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3103 Malicious code in invoicesettings-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3de3a7f2639414d0e6ff7a0993317695868f6538efb3c2e2e32fae55dac833c6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in disputeapiserv-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c234d2a403bb56f5512a4d647adfb222f46622a11a2689576a5f882442a4b861 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in invoicelifecycle-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e84b4abbc087a7b5b42ad12ecca83b68ff5f017356808e508ee32f7bfe000a1f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3092 Malicious code in at-validation-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 073941142afe6289331b83f586f09f0fc6d24a27aa0b14a392fd7ec429658e9e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3104 Malicious code in invoicetemplate-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0040946fd67ce8ddd6e93a9a31d2bdfc1ba57b40874f62c2b033f3d2be5a5888 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...