Skip to content
OpenAdvisories

Vendor

Zoho Subscriptions

2 known vulnerabilities.

Products

Zoho Billing – Embed Payment Form 1 Zoho Billing 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2025-57963

    WordPress Zoho Billing Plugin <= 4.1 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Zoho Subscriptions Zoho Billing zoho-subscriptions allows DOM-Based XSS.This issue affects Zoho Billing: from n/a through <= 4.1.

    Zoho Subscriptions Zoho Billing
  • Medium 6.5
    CVE-2025-30900

    WordPress Zoho Billing – Embed Payment Form plugin <= 4.0 - Stored Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Zoho Subscriptions Zoho Billing – Embed Payment Form allows Stored XSS. This issue affects Zoho Billing – Embed Payment Form: from n/a through 4.0.

    Zoho Subscriptions Zoho Billing – Embed Payment Form