CVE-2020-28415 | BDVDB-2026-144721 Detail

Description#

A reflected cross-site scripting (XSS) vulnerability exists in the TranzWare Payment Gateway 3.1.12.3.2. A remote unauthenticated attacker is able to execute arbitrary HTML code via crafted url (different vector than CVE-2020-28414).

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://compassplus.com/solutions/tranzware/
https://github.com/jet-pentest/CVE-2020-28415/blob/main/README.md

Exploit#

No public exploit known

History#

Version 12020-11-12Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.