SEPTEMBER 19, 2026
Live Feed
Back to database
Case File

CVE-2026-65518

MEDIUM · CVSS 6.5 EPSS 0.16%

Source: NVD + CISA KEV + EPSS · Published 2026-07-23 · Last synced 2026-08-22

CyberRota Analysis

AI-Generated

The vulnerability affects the Accept Donations with PayPal & Stripe plugin versions 1.5.5 and earlier, allowing for Cross-Site Scripting (XSS) attacks. This flaw can enable attackers to inject malicious scripts into web pages viewed by users, potentially compromising user data and session integrity. Organizations using this plugin should prioritize remediation to safeguard against potential exploitation.

CVE
CVE-2026-65518
Severity
MEDIUM
CVSS
6.5
EPSS
0.16%

Original NVD Description

Contributor Cross Site Scripting (XSS) in Accept Donations with PayPal & Stripe <= 1.5.5 versions.