Skip to content
OpenAdvisories
High · 7.5 CVE-2024-24548 EUVD-2024-21967GHSA-6hrp-c93c-rq8p

Payment EX Ver1.1.5b and earlier allows a remote unauthenticated attacker to obtain the information of the user who purchases merchandise u…

Published Feb 1, 2024 · Updated Aug 1, 2024 · Assigned by jpcert

Description

Payment EX Ver1.1.5b and earlier allows a remote unauthenticated attacker to obtain the information of the user who purchases merchandise using Payment EX.

Affected products

VendorProductAffectedFixed
Simplesite Payment EX Ver1.1.5b and earlier —

References