Paytm Payment Gateway vulnerabilities
2 known vulnerabilities in Paytm Payment Gateway from Paytm Payment Gateway. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score
Latest first
- 7.5 High severity
Paytm Payment Gateway: Improper Neutralization of Special Elements used in an SQL Command
The Paytm Payment Gateway WordPress plugin before 2.8.9 does not properly escape data taken from payment callbacks before using it in a SQL statement, and the integrity check on those callbacks can be forged when the gateway is enabled without credentials, all
- 7.5 High severity
Paytm Payment Gateway: Improper Neutralization of Input During Web Page Generation
The Paytm Payment Gateway WordPress plugin before 2.8.9 does not sanitize and escape data it stores from payment callbacks before outputting it in an admin page, and the integrity check on those callbacks can be forged when the gateway is enabled without crede