CVE-2021-47885: Authorize.net Payment Terminal

Medium severity, CVSS 6.4. EPSS: 0.3% chance of exploitation in the next 30 days.

Multiple payment terminal versions contain non-persistent cross-site scripting vulnerabilities in billing and payment information input fields. Attackers can inject malicious script code through vulnerable parameters to manipulate client-side requests and potentially execute session hijacking or phishing attacks.

Affected products

• Authorize.net Payment Terminal: version 2.4.1 only
• Criticalgears PayPal Pro Payment Terminal: version 3.1 only
• Criticalgears Stripe Payment Terminal: version 2.2.1 only

Published 2026-02-01. Last modified 2026-06-17.