Описание
The Easy PayPal & Stripe Buy Now Button WordPress plugin before 2.0.6 does not derive the payment amount on the server, taking it from a client-supplied field, so an unauthenticated attacker sets an arbitrary lower price for a purchase.
EPSS
Процентиль: 13%
0.00236
Низкий
5.3 Medium
CVSS3
Дефекты
CWE-472
Связанные уязвимости
CVSS3: 5.3
github
2 дня назад
The Easy PayPal & Stripe Buy Now Button WordPress plugin before 2.0.6 does not derive the payment amount on the server, taking it from a client-supplied field, so an unauthenticated attacker sets an arbitrary lower price for a purchase.
EPSS
Процентиль: 13%
0.00236
Низкий
5.3 Medium
CVSS3
Дефекты
CWE-472