{"id":"CVE-2026-81739","published":"2026-10-01T06:17:10.783","lastModified":"2026-10-01T13:11:52.923","description":"The Paytm Payment Gateway WordPress plugin before 2.8.9 does not sanitize and escape data it stores from payment callbacks before outputting it in an admin page, and the integrity check on those callbacks can be forged when the gateway is enabled without credentials, allowing unauthenticated users to store scripts that will run in the session of a store administrator.","cvssScore":7.5,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cwes":["CWE-79"],"vendors":[],"products":[],"references":[{"url":"https://wpscan.com/vulnerability/f77f3f04-cb98-4687-9080-dd0c99a7e926/","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"The Paytm Payment Gateway plugin fails to sanitize data from payment callbacks, allowing stored XSS in admin panels. When the gateway is misconfigured without credentials, any user can inject malicious scripts that execute in the administrator's browser session.","exploitability":"Exploitation requires an unauthenticated user to trigger a payment callback with forged data, which is moderately difficult but possible when the plugin is enabled without proper credentials.","blast_radius":"If exploited, attackers could execute arbitrary JavaScript in the admin session, potentially leading to full administrator compromise, data exfiltration, or further attacks on the WordPress site.","remediation":"Upgrade to version 2.8.9 or later to fix the sanitization and integrity check issues.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["xss","web","wordpress","admin"],"model":"garnet-coder","analyzedAt":"2026-10-13T09:06:23.547Z"}}