CVE-2025-30579
CVSS 3.1 Score 7.1 of 10 (high)
Details
Published Apr 1, 2025
CWE ID 79
Summary
CVE-2025-30579 is a Cross-site Scripting (XSS) vulnerability affecting the Jakeii Pesapal Gateway for Woocommerce. This issue, which occurs during web page generation, permits attackers to inject malicious scripts into a webpage viewed by other users. The vulnerability can be exploited by an attacker to steal user data, conduct phishing attacks, or take other malicious actions. The affected version range is from n/a to 2.1.0. Users of this software are advised to update to a patched version as soon as possible to mitigate the risk of an attack.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.