medium6.1
CVE-2020-28415
A reflected cross-site scripting (XSS) vulnerability exists in the TranzWare Payment Gateway 3.1.12.3.2.
Impact
A reflected cross-site scripting (XSS) vulnerability exists in the TranzWare Payment Gateway 3.1.12.3.2. A remote unauthenticated attacker is able to execute arbitrary HTML code via crafted url (different vector than CVE-2020-28414).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tranzware Payment Gateway Project | Tranzware Payment Gateway | Version 3.1.12.3.2 |