Alipay Project

Alipay

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.2

CVE-2021-24390

Exploit
  • EPSS 0.57%
  • Published 06.09.2021 11:15:07
  • Last modified 21.11.2024 05:52:58

A proid GET parameter of the WordPress支付宝Alipay|财付通Tenpay|贝宝PayPal集成插件 WordPress plugin through 3.7.2 is not sanitised, properly escaped or validated before inserting to a SQL statement not delimited by quotes, leading to SQL injection.

4.3

CVE-2014-4514

Exploit
  • EPSS 0.17%
  • Published 21.10.2014 15:55:06
  • Last modified 12.04.2025 10:46:40

Cross-site scripting (XSS) vulnerability in includes/api_tenpay/inc.tenpay_notify.php in the Alipay plugin 3.6.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via vectors related to the getDebugInfo function...