Unauthenticated Cross Site Scripting (XSS) in Paymob for WooCommerce <= 4.1.10 versions.

High CVSS 7.1

CVECVE-2026-66611

First seen2026-08-20 12:31 UTC

Disclosed2026-08-20 12:16 UTC

Last updated2026-08-20 12:31 UTC

Channel statusauto

Summary

Unauthenticated Cross Site Scripting (XSS) in Paymob for WooCommerce <= 4.1.10 versions.

No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).