Every CVE whose affected-product data names Techvill Paymoney, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (3)
CVE-2022-37140 — CVSS 8.0 (high): PayMoney 3.3 is vulnerable to Client Side Remote Code Execution (RCE). The vulnerability exists on the reply ticket function and upload the…
CVE-2022-34991 — CVSS 5.4 (medium): Paymoney v3.3 was discovered to contain multiple reflected cross-site scripting (XSS) vulnerabilities via the first_name and last_name…
CVE-2022-37137 — CVSS 5.4 (medium): PayMoney 3.3 is vulnerable to Stored Cross-Site Scripting (XSS) during replying the ticket. The XSS can be obtain from injecting under…