CVE-2025-49958: WordPress Robokassa payment gateway for Woocommerce plugin <= 1.8.6 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in robokassa Robokassa payment gateway for Woocommerce robokassa allows Reflected XSS.This issue affects Robokassa payment gateway for Woocommerce: from n/a through <= 1.8.6.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-49958?
CVE-2025-49958 is classified as a Cross-site Scripting (XSS) vulnerability, which can lead to significant security issues for users.
How do I fix CVE-2025-49958?
To fix CVE-2025-49958, update the Robokassa payment gateway for Woocommerce to a version newer than 1.8.1.
What impact does CVE-2025-49958 have on my website?
CVE-2025-49958 can allow attackers to execute malicious scripts in the context of a user's browser, potentially compromising sensitive data.
Which versions are affected by CVE-2025-49958?
CVE-2025-49958 affects the Robokassa payment gateway for Woocommerce versions up to and including 1.8.1.
Is user data at risk with CVE-2025-49958?
Yes, user data may be at risk as CVE-2025-49958 could enable attackers to steal information using XSS techniques.