CVE-2026-94179

Unauthenticated Cross Site Scripting (XSS) in Razorpay Payment Button <= 2.4.9 versions.

Published Sep 23, 2026
CVSS 7.1 high
0.2% chance of exploitation in the next 30 days (EPSS)

Affected software

Razorpay Payment Button

CVE-2026-94179 at the National Vulnerability Database