paypal vulnerabilities

2 known vulnerabilities in paypal from 202ecommerce. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  paypal: Improper Authorization

  CVE-2024-41670Jul 26, 2024202ecommerce

  In the module "PayPal Official" for PrestaShop 7+ releases prior to version 6.4.2 and for PrestaShop 1.6 releases prior to version 3.18.1, a malicious customer can confirm an order even if payment is finally declined by PayPal. A logical weakness during the ca

• 9.8 Critical severity

  paypal: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2023-28843Mar 31, 2023202ecommerceEPSS 1.17%

  PrestaShop/paypal is an open source module for the PrestaShop web commerce ecosystem which provides paypal payment support. A SQL injection vulnerability found in the PrestaShop paypal module from release from 3.12.0 to and including 3.16.3 allow a remote atta