Description
Multiple payment terminal versions contain non-persistent cross-site scripting vulnerabilities in billing and payment information input fields. Attackers can inject malicious script code through vulnerable parameters to manipulate client-side requests and potentially execute session hijacking or phishing attacks.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| CriticalGears | PayPal PRO Payment Terminal | 3.1 | — |
| CriticalGears | Stripe Payment Terminal | 2.2.1 | — |
| Authorize.net | Payment Terminal | 2.4.1 | — |
References
- Vulnerability Lab Advisory exploit
- Product Homepage product
- Product Homepage product
- Product Homepage product
- VulnCheck Advisory: Payment Terminal Multiple Versions Non-Persistent Cross-Site Scripting third-party-advisory