SZB-404f3a25be
EUVD lists unauthenticated XSS in GlobalPayments WooCommerce up to 1.23.3 (EUVD-2026-112943)
- Status
- Unverified: only social posts report this so far
- Kind
- Vulnerability
- Vendor
- Global Payments
- Product
- GlobalPayments WooCommerce
- First seen
Summary
The EU Vulnerability Database (EUVD) lists an unauthenticated Cross Site Scripting flaw in GlobalPayments WooCommerce versions 1.23.3 and earlier, scored 7.1/10 under CVSS v3.1. The item is an automated EUVD alert and does not describe exploitation.
If you use Global Payments
Check whether GlobalPayments WooCommerce 1.23.3 or earlier is installed
Update the plugin to a fixed release once available
Review payment-page scripts for unexpected changes
What the sources say 1
· Mastodon: “Unauthenticated Cross Site Scripting (XSS) in GlobalPayments WooCommerce <= 1.23.3 versions.” Source