CVE-2026-81739
Paytm Payment Gateway < 2.8.9 - Unauthenticated Stored XSS via Payment Callback
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The Paytm Payment Gateway WordPress plugin before 2.8.9 does not sanitize and escape data it stores from payment callbacks before outputting it in an admin page, and the integrity check on those callbacks can be forged when the gateway is enabled without credentials, allowing unauthenticated users to store scripts that will run in the session of a store administrator.
| Vendor | unknown |
| Product | paytm payment gateway |
| Published | Oct 1, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown paytm payment gateway
Be the first to know when new unknown vulnerabilities affecting unknown paytm payment gateway are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / Paytm Payment Gateway
0 < 2.8.9
References
Credits
Artus KG WPScan