CVE-2025-62750: WordPress WooCommerce Parcelas plugin <= 1.3.5 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Filipe Seabra WooCommerce Parcelas allows DOM-Based XSS.This issue affects WooCommerce Parcelas: from n/a through 1.3.5.
Other sources
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Filipe Seabra WooCommerce Parcelas woocommerce-parcelas allows DOM-Based XSS.This issue affects WooCommerce Parcelas: from n/a through <= 1.3.5.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-62750?
CVE-2025-62750 is categorized as a medium severity vulnerability due to its potential to allow cross-site scripting attacks.
How do I fix CVE-2025-62750?
To fix CVE-2025-62750, update the WooCommerce Parcelas plugin to version 1.3.6 or later.
What types of attacks can CVE-2025-62750 facilitate?
CVE-2025-62750 can facilitate DOM-based cross-site scripting (XSS) attacks.
Which versions of WooCommerce Parcelas are affected by CVE-2025-62750?
CVE-2025-62750 affects WooCommerce Parcelas versions from n/a through 1.3.5.
Who is the vendor for the affected product in CVE-2025-62750?
The vendor for the affected product in CVE-2025-62750 is Filipe Seabra.