5937 matches found
CVE-2024-46307
A loop hole in the payment logic of Sparkshop v1.16 allows attackers to arbitrarily modify the number of products...
CVE-2024-46307
A loop hole in the payment logic of Sparkshop v1.16 allows attackers to arbitrarily modify the number of products...
CVE-2024-47395
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in robokassa Robokassa payment gateway for Woocommerce robokassa allows Reflected XSS.This issue affects Robokassa payment gateway for Woocommerce: from n/a through = 1.6.1...
CVE-2024-47646
URL Redirection to Untrusted Site 'Open Redirect' vulnerability in tomlister Payflex Payment Gateway payflex-payment-gateway.This issue affects Payflex Payment Gateway: from n/a through = 2.6.1...
CVE-2024-47646 WordPress Payflex Payment Gateway plugin <= 2.6.1 - Open Redirection vulnerability
URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Payflex Payflex Payment Gateway.This issue affects Payflex Payment Gateway: from n/a through 2.6.1...
CVE-2024-47646
CVE-2024-47646 affects the Payflex Payment Gateway WordPress plugin (versions
CVE-2024-47646 WordPress Payflex Payment Gateway plugin <= 2.6.1 - Open Redirection vulnerability
URL Redirection to Untrusted Site 'Open Redirect' vulnerability in tomlister Payflex Payment Gateway payflex-payment-gateway.This issue affects Payflex Payment Gateway: from n/a through = 2.6.1...
WordPress plugin Payflex Payment Gateway 输入验证错误漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An input validation error...
PT-2024-32704 · Unknown · Payflex Payment Gateway
Name of the Vulnerable Software and Affected Versions: Payflex Payment Gateway versions through 2.6.1 Description: The issue is an 'Open Redirect' vulnerability, which allows URL redirection to untrusted sites. This vulnerability affects Payflex Payment Gateway. Recommendations: For Payflex Payme...
WordPress Payflex Payment Gateway plugin <= 2.6.1 - Open Redirection vulnerability
Open Redirection vulnerability discovered by Muhamad Agil Fachrian Patchstack Alliance in WordPress Plugin Payflex Payment Gateway versions = 2.6.1...
WordPress Robokassa payment gateway for Woocommerce Plugin <= 1.6.1 is vulnerable to Cross Site Scripting (XSS)
Software Robokassa payment gateway for Woocommerce Type Plugin Vulnerable versions = 1.6.1 Fixed in 1.6.2 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-47395 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 06b4d95a8c74 Credits Dimas...
WordPress Payflex Payment Gateway Plugin <= 2.6.1 is vulnerable to Open Redirection
Software Payflex Payment Gateway Type Plugin Vulnerable versions = 2.6.1 Fixed in 2.6.2 OWASP Top 10 A3: Injection Classification Open Redirection CVE CVE-2024-47646 Patch priority Low CVSS severity Low 4.7 Developer Claim ownership PSID ac682bcd42a4 Credits Muhamad Agil Fachrian Required privile...
CVE-2024-8914
The Thanh Toán Quét Mã QR Code Tự Động – MoMo, ViettelPay, VNPay và 40 ngân hàng Việt Nam plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 2.0.1 due to incorrect use of the wpksesallowedhtml function, which allows the 'onclick' attribute for...
WordPress plugin Thanh Toán Quét Mã QR Code T? Ð?ng – MoMo, ViettelPay, VNPay và 40 ngân hàng Vi?t Nam 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a suite of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin...
WordPress Thanh Toán Quét Mã QR Code Tự Động Plugin <= 2.0.1 is vulnerable to Cross Site Scripting (XSS)
Software Thanh Toán Quét Mã QR Code Tự Động Type Plugin Vulnerable versions = 2.0.1 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-8914 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 39d2756c43d9 Credits Frances...
Malicious code in pring-payment-demo-backend (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b3eed32902e1265a8b45d6189699734582790383eb848542f28396763e05ca31 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Payment Gateway SLIM CD Data Breach: 1.7 Million Users Impacted
The payment gateway platform SLIM CD suffered a massive data breach between August 2023 and June 2024, compromising…...
CVE-2024-45401 stripe-cli Path Traversal vulnerability
stripe-cli is a command-line tool for the payment processor Stripe. A vulnerability exists in stripe-cli starting in version 1.11.1 and prior to version 1.21.3 where a plugin package containing a manifest with a malformed plugin shortname installed using the --archive-url or --archive-path flags...