2 matches found
EUVD-2026-72753
XenForo before 2.3.13 contains a payment replay vulnerability in the PayPal REST payment provider that allows attackers to process the same webhook payload multiple times by exploiting a missing duplicate transaction ID check. Attackers can replay a valid webhook payload to trigger duplicate...
8.7CVSS5.7AI score0.00265EPSS
SaveExploits2References3
CVE-2026-73316: Insufficient Verification of Data Authenticity
XenForo before 2.3.13 contains a payment replay vulnerability in the PayPal REST payment provider that allows attackers to process the same webhook payload multiple times by exploiting a missing duplicate transaction ID check. Attackers can replay a valid webhook payload to trigger duplicate...
8.7CVSS5.9AI score0.00265EPSS
SaveExploits2References5
20