Vulnerabilities > Woocommerce > Payu India Payment Gateway > 2.1.1

DATE CVE VULNERABILITY TITLE RISK
2024-03-15 CVE-2024-27193 Unspecified vulnerability in Woocommerce Payu India Payment Gateway
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PayU PayU India allows Reflected XSS.This issue affects PayU India: from n/a through 3.8.2.
network
low complexity
woocommerce
6.1
2019-08-29 CVE-2019-14978 Improper Input Validation vulnerability in Woocommerce Payu India Payment Gateway 2.1.1
/payu/icpcheckout/ in the WooCommerce PayU India Payment Gateway plugin 2.1.1 for WordPress allows Parameter Tampering in the purchaseQuantity=1 parameter, as demonstrated by purchasing an item for lower than the intended price.
network
low complexity
woocommerce CWE-20
5.3