Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Alipay Project Component: Alipay Clear all filters
TI-2021-06682 CVE-2021-24390 · GHSA-hmc9-48x2-j657

Alipay <= 3.7.2 - Authenticated SQL Injection

Priority LOW 35

A proid GET parameter of the WordPress支付宝Alipay|财付通Tenpay|贝宝PayPal集成插件 WordPress plugin through 3.7.2 is not sanitised, properly escaped or validated before inserting to a SQL statement not delimited by quotes, leading t…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01547 Published 2021-09-06 No fix listed CWE-89
TI-2014-03701 CVE-2014-4514 · GHSA-v5x6-5pg5-rmgw

Cross-site scripting (XSS) vulnerability in includes/api_tenpay/inc.tenpay_notify.php in…

Priority LOW 23

Cross-site scripting (XSS) vulnerability in includes/api_tenpay/inc.tenpay_notify.php in the Alipay plugin 3.6.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via vectors relate…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01651 Published 2014-10-21 No fix listed CWE-79