Woocommerce Payu India Payment Gateway vulnerabilities

2 vulnerabilities

Known vulnerabilities in Woocommerce Payu India Payment Gateway, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.1CVE-2024-27193payu indiapayu india+2
EPSS score
0.35%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PayU India PayU India payu-india allows DOM-Based XSS.This issue affects PayU India: from n/a through <= 3.8.8.5.3CVE-2019-14978woocommercepayu_india_payment_gateway+1
EPSS score
1.22%
/payu/icpcheckout/ in the WooCommerce PayU India Payment Gateway plugin 2.1.1 for WordPress allows Parameter Tampering in the purchaseQuantity=1 parameter, as demonstrated by purchasing an item for lower than the intended price.