Techvill Paymoney
3 CVEs affecting Techvill Paymoney. Latest disclosed: 2022-09-14. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-37140 | High | 8.0 | 2022-09-14 | PayMoney 3.3 is vulnerable to Client Side Remote Code Execution (RCE). The vulnerability exists on the reply ticket function and upload the malicious file. A c… |
CVE-2022-37137 | Medium | 5.4 | 2022-09-14 | PayMoney 3.3 is vulnerable to Stored Cross-Site Scripting (XSS) during replying the ticket. The XSS can be obtain from injecting under "Message" field with "de… |
CVE-2022-34991 | Medium | 5.4 | 2022-07-26 | Paymoney v3.3 was discovered to contain multiple reflected cross-site scripting (XSS) vulnerabilities via the first_name and last_name parameters. |