PT-2024-16589

Name of the Vulnerable Software and Affected Versions Razorpay Payment Button Elementor Plugin versions 1.2.5 and earlier Description The issue is related to Reflected Cross-Site Scripting due to the use of add query arg and remove query arg without proper escaping on the URL. This allows...

CVE-2024-10850: Improper Neutralization of Input During Web Page Generation

The Razorpay Payment Button Elementor Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg & removequeryarg without appropriate escaping on the URL in all versions up to, and including, 1.2.5. This makes it possible for unauthenticated attacker...