Vendors / Ido Kobelkowsky Records 5 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 4 CVSS 7.0–8.9
Exploited now Ido Kobelkowsky records in CISA KEV No Ido Kobelkowsky vulnerabilities are listed in CISA KEV.
Priority MEDIUM 64
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ido Kobelkowsky Simple Payment simple-payment allows Reflected XSS.This issue affects Simple Payment: from n/a through…
CVSS 3.1 HIGH 7.1· Network · No auth · User interaction · EPSS 0.00436 · Published 2024-12-13 · No fix listed CWE-79
Priority LOW 35
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Ido Kobelkowsky Simple Payment simple-payment.This issue affects Simple Payment: from n/a through <…
CVSS 3.1 HIGH 7.5· Network · No auth · User interaction · EPSS 0.00363 · Published 2025-11-06 · No fix listed CWE-98
Priority LOW 31
Unauthenticated Cross Site Scripting (XSS) in Simple Payment <= 2.5.1 versions.
CVSS 3.1 HIGH 7.1· Network · No auth · User interaction · EPSS 0.00251 · Published 2026-09-03 · No fix listed CWE-79
Priority LOW 30
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ido Kobelkowsky Simple Payment simple-payment.This issue affects Simple Payment: from n/a through <= 2.4.6.
CVSS 3.1 HIGH 7.1· Network · No auth · User interaction · EPSS 0.00185 · Published 2025-11-06 · No fix listed CWE-79
Priority LOW 28
Contributor Cross Site Scripting (XSS) in Simple Payment <= 2.5.4 versions.
CVSS 3.1 MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.00224 · Published 2026-09-11 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
Critical0 High4 Medium1 Low0 No CVSS0