CVE-2025-32570

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ChillPay ChillPay WooCommerce chillpay-payment-gateway allows Stored XSS.This issue affects ChillPay WooCommerce: from n/a through = 2.5.3...

CVE-2025-32570

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ChillPay ChillPay WooCommerce chillpay-payment-gateway allows Stored XSS.This issue affects ChillPay WooCommerce: from n/a through = 2.5.3...

CVE-2025-32570 WordPress ChillPay WooCommerce Plugin <= 2.5.3 - CSRF to Stored XSS vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ChillPay ChillPay WooCommerce allows Stored XSS. This issue affects ChillPay WooCommerce: from n/a through 2.5.3...

CVE-2025-32570 WordPress ChillPay WooCommerce Plugin <= 2.5.3 - CSRF to Stored XSS vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ChillPay ChillPay WooCommerce chillpay-payment-gateway allows Stored XSS.This issue affects ChillPay WooCommerce: from n/a through = 2.5.3...

CVE-2025-32570

CVE-2025-32570: ChillPay WooCommerce is affected by a Cross-Site Request Forgery to Stored Cross-Site Scripting (CSRF to stored XSS) vulnerability. Affected product: ChillPay WooCommerce (plugin for WordPress). Affected range: ChillPay WooCommerce 2.5.3 and earlier. Root cause and exact vectors a...

WordPress ChillPay WooCommerce Plugin <= 2.5.3 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by 0xd4rk5id3 in WordPress Plugin ChillPay WooCommerce versions = 2.5.3...

PT-2025-15792 · Woocommerce · Chillpay Woocommerce

Name of the Vulnerable Software and Affected Versions: ChillPay WooCommerce versions through 2.5.3 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This enables potential attackers to inject...