CVE-2023-25702 Auth

Description

Auth. (admin+) Stored Cross-site Scripting (XSS) vulnerability in Fullworks Quick Paypal Payments plugin <= 5.7.25 versions.

Affected products and versions

Product	Affected versions	Fixed in
Quick Paypal Payments 5.7	earliest → 5.7.25	No fix stated

Other CVEs of Quick Paypal Payments

The 6 CVEs of Quick Paypal Payments →

CVE-2025-27003 Cross-Site Request Forgery (CSRF) vulnerability in fullworks Quick Paypal Payments quick-paypal-payments allows Cross… 4.3 Medium CVE-2023-25714 Missing Authorization vulnerability in Fullworks Quick Paypal Payments allows Exploiting Incorrectly Configured Access… 7.5 High CVE-2022-4974 The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request… 6.3 Medium CVE-2023-23889 Auth 6.5 Medium