CVE-2026-78282 Unauthenticated Cross Site Scripting (XSS) in Stripe Payments <= 2.1.2 versions

Description

Unauthenticated Cross Site Scripting (XSS) in Stripe Payments <= 2.1.2 versions.

Affected products and versions

Product	Affected versions	Fixed in
Stripe Payments 2.1	earliest → 2.1.2	No fix stated

Other CVEs of Stripe Payments

The 2 CVEs of Stripe Payments →

CVE-2023-48286 Missing Authorization vulnerability in mra13 Stripe Payments stripe-payments allows Exploiting Incorrectly Configured… 8.2 High