PatchTheCVEgmo-pg payment module vulnerabilities and fixes
Recent CVEs affecting gmo-pg payment module, with upgrade or downgrade steps. 2 tracked.
Also searched as: gmo pg payment module, gmo-pgpaymentmodule.
gmo-pg payment module has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2018-09-07. Highest priority: CVE-2018-0658 (score 41/100).
- CVE-2018-0658 HIGH 7.2 UPGRADE UPGRADE Input validation issue in EC-CUBE Payment Module (2.12) version 3.5.23 and earlier, EC-CUBE Payment Module (2.
- CVE-2018-0657 MEDIUM 4.8 UPGRADE UPGRADE Cross-site scripting vulnerability in EC-CUBE Payment Module and GMO-PG Payment Module (PG Multi-Payment Servi
FAQ
How do I fix gmo-pg payment module vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is gmo-pg payment module being exploited right now?
None of the tracked gmo-pg payment module CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which gmo-pg payment module CVE should I patch first?
CVE-2018-0658 currently ranks highest (41/100): Input validation issue in EC-CUBE Payment Module (2.12) version 3.5.23 and earlier, EC-CUBE Payment Module (2..