Approved changes feed: RSS · Atom

cpe:2.3:a:zoho_subscriptions:zoho_billing_–_embed_payment_form:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorZoho Subscriptions (a15730f0-0a5a-5c66-b069-40d0a290f6a5)
ProductZoho Billing – Embed Payment Form (a020e186-89d5-5a9c-9327-13c62d7672b0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-30900 vulnerable 2026-06-08 07:17:02.020531 WordPress Zoho Billing – Embed Payment Form plugin <= 4.0 - Stored Cross Site Scripting (XSS) vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Zoho Subscriptions Zoho Billing – Embed Payment Form allows Stored XSS. This issue affects Zoho Billing – Embed Payment Form: from n/a through 4.0.
Published: 2025-03-27T10:55:50.264Z
Updated: 2025-05-10T02:55:23.531Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.