CVE-2026-81292

HighCVSS 7.1

Published: 03/09/2026(UTC)Updated: 03/09/2026(UTC)Translated: 03/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.18%

8th percentile - higher than 8% of all known CVEs

Unauthenticated Cross Site Scripting (XSS) in Simple Payment versions up to 2.5.1.

An attacker can exploit the vulnerability to execute scripts in the victim's browser, potentially leading to data theft or session hijacking.

Update the Simple Payment extension to the latest patched version.

Original NVD description (English source)

Unauthenticated Cross Site Scripting (XSS) in Simple Payment <= 2.5.1 versions.