Vulnerabilities

TI-2022-17308 CVE-2022-37140 · GHSA-v78j-fp7j-4hfj

PayMoney 3.3 is vulnerable to Client Side Remote Code Execution (RCE).

LOW 38

PayMoney 3.3 is vulnerable to Client Side Remote Code Execution (RCE).

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.01751 Published 2022-09-14 No fix listed CWE-434

TI-2022-17305 CVE-2022-37137 · GHSA-43gg-3jq2-xwfh

MEDIUM 58

PayMoney 3.3 is vulnerable to Stored Cross-Site Scripting (XSS) during replying the ticket.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00598 Published 2022-09-14 No fix listed CWE-79

TI-2022-15745 CVE-2022-34991 · GHSA-vr8p-pf4j-6wrh

LOW 25

Paymoney v3.3 was discovered to contain multiple reflected cross-site scripting (XSS) vulnerabilities via the first_name and last_name parameters.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00519 Published 2022-07-26 No fix listed CWE-79