cleantalk
Vulnerabilities and Security Researches

Payment forms, Buy now buttons and Invoicing System | GetPaid, CVE-2024-43973

CVE, Research URL

CVE-2024-43973

Published on
Nov 01, 2024
Research Description
Missing Authorization vulnerability in Stiofan GetPaid invoicing allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GetPaid: from n/a through <= 2.8.11.
Affected versions
max 2.8.12.
Status
vulnerable