CVE-2025-53455

Name of the Vulnerable Software and Affected Versions CashBill.pl – Płatności WooCommerce versions prior to 3.2.2

Description Stored Cross-Site Scripting (XSS) occurs due to insufficient input sanitization and output escaping. This allows authenticated attackers with administrator-level access and above to inject arbitrary web scripts into pages. The issue specifically affects multi-site installations and environments where unfiltered html has been disabled. Cross-Site Scripting is a flaw that allows an attacker to inject malicious scripts into content that is then served to other users.

Recommendations Update to a version newer than 3.2.1.