CVE-2020-28415: Improper Neutralization of Input During Web Page Generation

A reflected cross-site scripting XSS vulnerability exists in the TranzWare Payment Gateway 3.1.12.3.2. A remote unauthenticated attacker is able to execute arbitrary HTML code via crafted url different vector than CVE-2020-28414...

CVE-2020-28414: Improper Neutralization of Input During Web Page Generation

A reflected cross-site scripting XSS vulnerability exists in the TranzWare Payment Gateway 3.1.12.3.2. A remote unauthenticated attacker is able to execute arbitrary HTML code via crafted url different vector than CVE-2020-28415...

PT-2020-17007

Name of the Vulnerable Software and Affected Versions TranzWare Payment Gateway version 3.1.12.3.2 Description A reflected cross-site scripting issue exists, allowing a remote unauthenticated attacker to execute arbitrary HTML code via a crafted URL. Recommendations For version 3.1.12.3.2, at the...

PT-2020-17006

Name of the Vulnerable Software and Affected Versions TranzWare Payment Gateway version 3.1.12.3.2 Description A reflected cross-site scripting issue exists, allowing a remote unauthenticated attacker to execute arbitrary HTML code via a crafted URL. Recommendations For version 3.1.12.3.2, at the...