CVE-2026-96332

The yalla ya! Simple Payment (simple-payment) WordPress plugin, versions n/a through 2.5.4 , is vulnerable to a Reflected Cross-Site Scripting (XSS) flaw. The vulnerability is caused by the improper neutralization of input during web page generation. This allows an attacker to execute malicious s...

CVE-2024-54303 WordPress Simple Payment plugin <= 2.3.8 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ido Kobelkowsky Simple Payment simple-payment allows Reflected XSS.This issue affects Simple Payment: from n/a through = 2.3.8...