Corvusinfo vulnerabilities
We track 1 vulnerability in Corvusinfo products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on July 11, 2026.
1vulnerabilities
0critical
1high
0exploited
7.2average CVSS score
Latest Corvusinfo vulnerabilities
- 7.2 High severity
CorvusPay WooCommerce Payment Gateway: Improper Neutralization of Input During Web Page Generation
The CorvusPay WooCommerce Payment Gateway plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'approval_code' parameter in all versions up to, and including, 2.7.4 due to insufficient input sanitization and output escaping. This makes it