Lucene search

Amazon Pay Security Vulnerabilities

cve

CVE-2019-6003

Cross-site scripting vulnerability in EC-CUBE plugin 'Amazon Pay Plugin 2.12,2.13' version 2.4.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

6.1CVSS

6AI Score

0.001EPSS

2019-09-12 05:15 PM

cve

CVE-2020-28199

best it Amazon Pay Plugin before 9.4.2 for Shopware exposes Sensitive Information to an Unauthorized Actor.

9.1CVSS

9.1AI Score

0.003EPSS

2021-02-26 03:15 PM