Skip to content
OpenAdvisories

Product · Sylius

PayPalPlugin

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2021-41120

    Unauthorized access to Credit card form in sylius/paypal-plugin

    sylius/paypal-plugin is a paypal plugin for the Sylius development platform. In affected versions the URL to the payment page done after checkout was created with autoincremented payment id (/pay-with-paypal/{id}) and therefore it was easy to predict. The pro…

    Sylius PayPalPlugin sylius/paypal-plugin Packagist