Cross-site Scripting Vulnerability in Easy PayPal Buy Now Button by Scott Paterson
CVE-2025-47623

4.8MEDIUM

Key Information:

Vendor

WordPress
Status
Easy Paypal Buy Now Button
Vendor
CVE Published:
7 May 2025

What is CVE-2025-47623?

A Cross-site Scripting (XSS) vulnerability affects the Easy PayPal Buy Now Button developed by Scott Paterson, allowing attackers to inject malicious scripts. This vulnerability enables the storage of malicious code, impacting users who interact with compromised web pages. Websites utilizing versions from not applicable to 2.0 are at risk, emphasizing the need for immediate security measures and updates to protect data integrity and user experience.

Affected Version(s)

Easy PayPal Buy Now Button <= 2.0

References

https://patchstack.com/database/wordpress/plugin/wp-ecomm...
vdb-entry

CVSS V3.1

Score:
4.8
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Nabil Irawan (Patchstack Alliance)
.