CVE-2026-78282

An unauthenticated Cross Site Scripting (XSS) vulnerability exists in Stripe Payments versions 2.1.2 and earlier, allowing attackers to inject malicious scripts into web pages viewed by users. This could lead to session hijacking, data theft, or other malicious actions impacting user trust and application integrity. Organizations using affected versions of Stripe Payments should prioritize remediation to protect their users and maintain security compliance.