TI-2026-06607 CVE-2026-7517 · GHSA-6q84-x2rr-737v
Cross-site scripting in dhruvin Custom Payment Gateways for WooCommerce
Priority LOW 38
The Custom Payment Gateways for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'alg_wc_cpg_input_fields' parameter in all versions up to, and including, 2.1.0 due to insufficient in…