Skip to content
CVE PROGRAM SOURCE RECORD6.1 Medium

CVE-2023-6786

Payment Gateway for Telcell <= 2.0.1 - Unauthenticated Open Redirect

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WPScan

Description

The Payment Gateway for Telcell WordPress plugin through 2.0.1 does not validate the api_url parameter before redirecting the user to its value, leading to an Open Redirect issue

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Payment Gateway for Telcell

Default version status: affected

  • 0 to ≤ 2.0.1affected

References