Checkout for PayPal, CVE-2025-39572

CVE, Research URL: CVE-2025-39572
Home page URL: Security reports for Checkout for PayPal
Application: Checkout for PayPal
Published on: Apr 16, 2025
Research Description: Checkout for PayPal [checkout-for-paypal] < 1.0.39 CVE-2025-39572 [en] Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Noor Alam Checkout for PayPal allows Stored XSS. This issue affects Checkout for PayPal: from n/a through 1.0.38.
Affected versions: Min -, max 1.0.39.
Status: vulnerable