Cross-site Scripting Vulnerability in Paytm Payment Donation Plugin
CVE-2025-24635

7.1HIGH

Key Information:

Vendor

WordPress
Status
Paytm Payment Donation
Vendor
CVE Published:
31 January 2025

What is CVE-2025-24635?

A reflected cross-site scripting (XSS) vulnerability exists in the Paytm Payment Donation plugin, allowing attackers to inject malicious scripts into web pages viewed by users. This can result in unauthorized access to sensitive information or manipulation of web content. The vulnerability affects Paytm Payment Donation versions from n/a up to 2.3.1, making it crucial for users to update their systems and secure their online transactions.

Affected Version(s)

Paytm Payment Donation <= 2.3.1

References

https://patchstack.com/database/wordpress/plugin/paytm-do...
vdb-entry

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

SOPROBRO (Patchstack Alliance)
.