Threats tagged 'ghsa-jmx4-4r8w-g29h'

A SQL injection vulnerability exists in PipraPay version 3.0.0 within the Admin Panel component's deleteData function. This vulnerability allows remote attackers to manipulate the selected_ids/ItemID argument to execute SQL injection attacks. The vulnerability has been publicly disclosed, and exploit code is available. The project has been notified but has not yet issued a response or patch. The CVSS score is 6.3, indicating a medium severity risk.