Sylius PayPal Plugin Payment Amount Manipulation Vulnerability

🗓️ 17 Mar 2025 21:26:50Reported by GitHub Advisory DatabaseType

Vulnerability allows payment amount manipulation in Sylius PayPal Plugin, risking financial loss and fraud.

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2025-29788	17 Mar 202513:47	–	circl
CNNVD	PayPal Plugin 安全漏洞	17 Mar 202500:00	–	cnnvd
CVE	CVE-2025-29788	17 Mar 202513:25	–	cve
Cvelist	CVE-2025-29788 Sylius PayPal Plugin Payment Amount Manipulation Vulnerability	17 Mar 202513:25	–	cvelist
EUVD	EUVD-2025-6525	3 Oct 202520:07	–	euvd
NVD	CVE-2025-29788	17 Mar 202514:15	–	nvd
OSV	CVE-2025-29788 Sylius PayPal Plugin Payment Amount Manipulation Vulnerability	17 Mar 202513:25	–	osv
OSV	GHSA-PQQ3-Q84H-PJ6X Sylius PayPal Plugin Payment Amount Manipulation Vulnerability	17 Mar 202521:26	–	osv
RedhatCVE	CVE-2025-29788	19 Mar 202514:27	–	redhatcve
Snyk	External Control of Assumed-Immutable Web Parameter	17 Mar 202513:47	–	snyk

Vulners

Node

sylius paypal-pluginRange2.0.0–2.0.1composer

sylius paypal-pluginRange1.7.0–1.7.1composer

sylius paypal-pluginRange<1.6.1composer

Source	Link
github	www.github.com/Sylius/PayPalPlugin/security/advisories/GHSA-pqq3-q84h-pj6x
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-29788
github	www.github.com/Sylius/PayPalPlugin/commit/31e71b0457e5d887a6c19f8cfabb8b16125ec406
github	www.github.com/Sylius/PayPalPlugin/commit/8a81258f965b7860d4bccb52942e4c5b53e6774d
github	www.github.com/Sylius/PayPalPlugin/releases/tag/v1.6.1
github	www.github.com/Sylius/PayPalPlugin/releases/tag/v1.7.1
github	www.github.com/Sylius/PayPalPlugin/releases/tag/v2.0.1
github	www.github.com/advisories/GHSA-pqq3-q84h-pj6x

17 Mar 2025 21:26Current

6.4Medium risk

Vulners AI Score6.4

CVSS 3.16.5

EPSS0.00464

SSVC