Medium severity6.1NVD Advisory· Published Nov 12, 2020· Updated Jun 17, 2026
CVE-2020-28415
CVE-2020-28415
Description
A reflected cross-site scripting (XSS) vulnerability exists in the TranzWare Payment Gateway 3.1.12.3.2. A remote unauthenticated attacker is able to execute arbitrary HTML code via crafted url (different vector than CVE-2020-28414).
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:a:tranzware_payment_gateway_project:tranzware_payment_gateway:3.1.12.3.2:*:*:*:*:*:*:*
- TranzWare/Payment Gatewaydescription
- Range: 3.1.12.3.2
Patches
Vulnerability mechanics
References
2- github.com/jet-pentest/CVE-2020-28415/blob/main/README.mdnvdThird Party Advisory
- compassplus.com/solutions/tranzware/nvdProduct
News mentions
0No linked articles in our index yet.