Description
Cross-Site Request Forgery (CSRF) vulnerability in payform PayForm payform allows Stored XSS.This issue affects PayForm: from n/a through <= 2.0.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| payform | PayForm | ≤ 2.0 | — |
High · 7.1
CVE-2025-23872
EUVD-2025-3493GHSA-2m2v-wq87-9h5c
WordPress PayForm plugin <= 2.0 - CSRF to Stored XSS vulnerability
Published Jan 16, 2025 · Updated May 11, 2026 · Assigned by Patchstack