Threats tagged 'ghsa-22pf-hgfp-4gj7'

A security flaw in PipraPay 3.0.0 affects the system-settings-import function in the ZIP Archive Handler component, allowing unrestricted upload through manipulation. The vulnerability can be exploited remotely. Public exploit code is available, but the vendor has not yet responded or issued a fix. The CVSS score is 4.7, indicating medium severity.