Lucene search
+L

75 matches found

Cvelist
Cvelist
added 2023/11/03 12:18 p.m.39 views

CVE-2022-45805 WordPress Paytm Payment Gateway Plugin <= 2.7.3 is vulnerable to SQL Injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Paytm Paytm Payment Gateway paytm-payments allows SQL Injection.This issue affects Paytm Payment Gateway: from n/a through 2.7.3...

8.2CVSS10AI score0.02327EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/11/03 12:18 p.m.19 views

CVE-2022-45805 WordPress Paytm Payment Gateway plugin <= 2.7.3 - Auth. SQL Injection (SQLi) vulnerability

A vulnerability in integrationdevpaytm Paytm Payment Gateway paytm-payments.This issue affects Paytm Payment Gateway: from n/a through = 2.7.3...

8.2CVSS8.6AI score0.02327EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/11/03 12:0 a.m.7 views

PT-2023-14758 · Paytm · Paytm Payment Gateway

Name of the Vulnerable Software and Affected Versions: Paytm Payment Gateway versions through 2.7.3 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection, which can be exploited...

9.8CVSS9.7AI score0.02327EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2023/11/03 12:0 a.m.6 views

WordPress Plugin Paytm Payment Gateway SQL Injection Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin Paytm Payment Gateway is...

9.8CVSS7.7AI score0.02327EPSS
SaveExploits0References2
OSV
OSV
added 2023/08/14 3:15 p.m.8 views

CVE-2023-28535

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Paytm Paytm Payment Donation plugin = 2.2.0 versions...

6.1CVSS7.3AI score0.00382EPSS
SaveExploits0References1
NVD
NVD
added 2023/08/14 3:15 p.m.17 views

CVE-2023-28535

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Paytm Paytm Payment Donation plugin = 2.2.0 versions...

7.1CVSS6.2AI score0.00382EPSS
SaveExploits0References1
Prion
Prion
added 2023/08/14 3:15 p.m.17 views

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Paytm Paytm Payment Donation plugin = 2.2.0 versions...

5.8CVSS6AI score0.00382EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/08/14 2:35 p.m.9 views

CVE-2023-28535 WordPress Paytm Payment Donation Plugin <= 2.2.0 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Paytm Paytm Payment Donation plugin = 2.2.0 versions...

7.1CVSS5.9AI score0.00382EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/08/14 2:35 p.m.25 views

CVE-2023-28535 WordPress Paytm Payment Donation Plugin <= 2.2.0 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Paytm Paytm Payment Donation plugin = 2.2.0 versions...

7.1CVSS6.3AI score0.00382EPSS
SaveExploits0References1
CVE
CVE
added 2023/08/14 2:35 p.m.34 views

CVE-2023-28535

CVE-2023-28535: WordPress Paytm Donation Plugin ≤2.2.0 is vulnerable to unauthenticated reflected Cross-Site Scripting (XSS). The issue arises in Paytm Paytm Payment Donation plugin and is publicly tracked; Patchstack notes a fix in version 2.2.1. If not updated, affected deployments could allow ...

7.1CVSS6AI score0.00382EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/08/14 12:0 a.m.7 views

WordPress plugin paytm-donation cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS6AI score0.00382EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2023/04/14 12:0 a.m.16 views

WordPress Paytm Payment Donation Plugin <= 2.2.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software Paytm Payment Donation Type Plugin Vulnerable versions = 2.2.0 Fixed in 2.2.1 OWASP Top 10 A8: Cross Site Request Forgery CSRF Classification Cross Site Request Forgery CSRF CVE CVE-2023-28535 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 0cde2dab29f5 Credits...

7.1CVSS7.1AI score0.00382EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2023/02/22 12:0 a.m.11 views

WordPress Paytm Payment Gateway Plugin <= 2.7.3 is vulnerable to SQL Injection

Software Paytm Payment Gateway Type Plugin Vulnerable versions = 2.7.3 Fixed in 2.7.7 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2022-45805 Patch priority Low CVSS severity Low 8.2 Developer Claim ownership PSID a951aa23af06 Credits Aman Rawat Required privilege Editor...

9.8CVSS7.2AI score0.02327EPSS
SaveExploits0References2Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:26 p.m.3 views

Malicious code in paytm-blink-checkout-react-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 385c2fcacf3dc11e4b650087cb43c2981965b79ff503bf07434e1464fd9a131d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2022/06/20 8:26 p.m.9 views

MAL-2022-5250 Malicious code in paytm-blink-checkout-react-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 385c2fcacf3dc11e4b650087cb43c2981965b79ff503bf07434e1464fd9a131d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:26 p.m.11 views

Malicious code in paytm-mini-programs-nodejs-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ece1cd6a416c48321170a5015c0609f18dfe4e705939543fdd5b06d29e4d8bba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:13 p.m.8 views

Malicious code in paytm-kapacitor-simplejson-datasource (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 84649341022644835524ed653b8d6c2d04fe565ff315c3fe006b339bce8144da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2022/06/20 8:13 p.m.10 views

MAL-2022-5252 Malicious code in paytm-kapacitor-simplejson-datasource (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 84649341022644835524ed653b8d6c2d04fe565ff315c3fe006b339bce8144da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/13 5:48 a.m.4 views

Malicious code in paytm-kafka-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8edfa4dabe018178d0903a28e13409a37b657b204270e6036afb5d22488e428a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2022/06/13 5:48 a.m.15 views

MAL-2022-5251 Malicious code in paytm-kafka-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8edfa4dabe018178d0903a28e13409a37b657b204270e6036afb5d22488e428a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Rows per page
Query Builder