Medium · 4.7 CVE-2022-29416 EUVD-2022-33754GHSA-wvrj-rpvr-8f27

WordPress Afterpay Gateway for WooCommerce Plugin <= 3.5.0 is vulnerable to Cross Site Scripting (XSS)

Published Feb 6, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Afterpay Product: Afterpay Gateway for WooCommerce Category: Web / CMS

Description

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Afterpay Gateway for WooCommerce <= 3.5.0 versions.

Affected products

Vendor	Product	Affected	Fixed
Afterpay	Afterpay Gateway for WooCommerce	≤ 3.5.0	—

References

https://patchstack.com/database/vulnerability/afterpay-gateway-for-woocommerce/wordpress-afterpay-gateway-for-woocommerce-plugin-3-5-0-unauth-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve vdb-entry