CVE-2025-24635

Summary

CVE-2025-24635 is a Cross-site Scripting (XSS) vulnerability affecting the Paytm Payment Donation platform from an undisclosed version up to 2.3.1. Malicious actors can inject malicious code into web pages generated by the application, potentially stealing user data or taking control of user sessions. This issue arises due to insufficient input validation, allowing unauthorized scripts to be executed in users' browsers. Successful exploitation could lead to unintended actions, data theft, or unauthorized access. Users are advised to update to the latest version of the Paytm Payment Donation software to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.