CVE-2020-28414

A reflected cross-site scripting (XSS) vulnerability exists in the TranzWare Payment Gateway 3.1.12.3.2

published November 12, 2020

CVSS
—
EPSS
1%
Percentile
65.1
In the wild
Unconfirmed
What it is

A reflected cross-site scripting (XSS) vulnerability exists in the TranzWare Payment Gateway 3.1.12.3.2. A remote unauthenticated attacker is able to execute arbitrary HTML code via crafted url (different vector than CVE-2020-28415).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01090 · 65.1th percentile
Published
2020-11-12T19:39Z
EPSS history
Timeline
  • 12 NOV 19:39Z
    A reflected cross-site scripting (XSS) vulnerability exists in the TranzWare Payment Gateway 3.1.12.3.2
    cvelistv5