Yansongda vulnerabilities
We track 1 vulnerability in Yansongda products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on March 26, 2026.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Yansongda vulnerabilities
- 7.5 High severity
pay: Authentication Bypass by Spoofing
Pay is an open-source payment SDK extension package for various Chinese payment services. Prior to version 3.7.20, the `verify_wechat_sign()` function in `src/Functions.php` unconditionally skips all signature verification when the PSR-7 request reports `local