PT-2023-21784

Name of the Vulnerable Software and Affected Versions Paytm Payment Donation plugin versions = 2.2.0 Description The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially allowing them to steal us...

CVE-2023-28535: Improper Neutralization of Input During Web Page Generation

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Paytm Paytm Payment Donation plugin = 2.2.0 versions...

WordPress plugin paytm-donation cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress Paytm Payment Donation Plugin <= 2.2.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software Paytm Payment Donation Type Plugin Vulnerable versions = 2.2.0 Fixed in 2.2.1 OWASP Top 10 A8: Cross Site Request Forgery CSRF Classification Cross Site Request Forgery CSRF CVE CVE-2023-28535 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 0cde2dab29f5 Credits...

WordPress Paytm Payment Gateway Plugin <= 2.7.3 is vulnerable to SQL Injection

Software Paytm Payment Gateway Type Plugin Vulnerable versions = 2.7.3 Fixed in 2.7.7 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2022-45805 Patch priority Low CVSS severity Low 8.2 Developer Claim ownership PSID a951aa23af06 Credits Aman Rawat Required privilege Editor...

Malicious code in paytm-mini-programs-nodejs-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ece1cd6a416c48321170a5015c0609f18dfe4e705939543fdd5b06d29e4d8bba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in paytm-blink-checkout-react-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 385c2fcacf3dc11e4b650087cb43c2981965b79ff503bf07434e1464fd9a131d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5250 Malicious code in paytm-blink-checkout-react-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 385c2fcacf3dc11e4b650087cb43c2981965b79ff503bf07434e1464fd9a131d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in paytm-kapacitor-simplejson-datasource (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 84649341022644835524ed653b8d6c2d04fe565ff315c3fe006b339bce8144da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5252 Malicious code in paytm-kapacitor-simplejson-datasource (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 84649341022644835524ed653b8d6c2d04fe565ff315c3fe006b339bce8144da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in paytm-kafka-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8edfa4dabe018178d0903a28e13409a37b657b204270e6036afb5d22488e428a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5251 Malicious code in paytm-kafka-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8edfa4dabe018178d0903a28e13409a37b657b204270e6036afb5d22488e428a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2021-24554

The Paytm – Donation Plugin WordPress plugin through 1.3.2 does not sanitise, validate or escape the id GET parameter before using it in a SQL statement when deleting donations, leading to an authenticated SQL injection issue...

CVE-2021-24554

The Paytm – Donation Plugin WordPress plugin through 1.3.2 does not sanitise, validate or escape the id GET parameter before using it in a SQL statement when deleting donations, leading to an authenticated SQL injection issue...

Sql injection

The Paytm – Donation Plugin WordPress plugin through 1.3.2 does not sanitise, validate or escape the id GET parameter before using it in a SQL statement when deleting donations, leading to an authenticated SQL injection issue...

CVE-2021-24554

The Paytm – Donation Plugin WordPress plugin through 1.3.2 does not sanitise, validate or escape the id GET parameter before using it in a SQL statement when deleting donations, leading to an authenticated SQL injection issue...

CVE-2021-24554 Paytm - Donation Plugin <= 1.3.2 - Authenticated (admin+) SQL Injection

The Paytm – Donation Plugin WordPress plugin through 1.3.2 does not sanitise, validate or escape the id GET parameter before using it in a SQL statement when deleting donations, leading to an authenticated SQL injection issue...

CVE-2021-24554

CVE-2021-24554 affects the WordPress plugin Paytm Donation (

WordPress plugin SQL注入漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an open source application plugin for WordPress. A SQL injection vulnerability exists in the WordPress plugin...

PT-2021-16074

Name of the Vulnerable Software and Affected Versions Paytm – Donation Plugin WordPress plugin versions 1.3.2 and earlier Description The issue arises from the plugin's failure to sanitise, validate, or escape the id GET parameter before using it in a SQL statement when deleting donations, leadin...