paymoney vulnerabilities and fixes

Recent CVEs affecting paymoney, with upgrade or downgrade steps. 3 tracked.

paymoney has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2022-09-14. Highest priority: CVE-2022-37140 (score 52/100).

• CVE-2022-37140 HIGH 8.0 DOWNGRADE PayMoney 3.3 is vulnerable to Client Side Remote Code Execution (RCE)
• CVE-2022-37137 MEDIUM 5.4 DOWNGRADE PayMoney 3.3 is vulnerable to Stored Cross-Site Scripting (XSS) during replying the ticket
• CVE-2022-34991 MEDIUM 5.4 DOWNGRADE Paymoney v3.3 was discovered to contain multiple reflected cross-site scripting (XSS) vulnerabilities via the

FAQ

How do I fix paymoney vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is paymoney being exploited right now?

None of the tracked paymoney CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which paymoney CVE should I patch first?

CVE-2022-37140 currently ranks highest (52/100): PayMoney 3.3 is vulnerable to Client Side Remote Code Execution (RCE).

RSS feed for paymoney · ← Back to latest CVEs