VYPR

Paypal

by Sylius

CVEs (1)

  • CVE-2021-41120HigOct 5, 2021
    risk 0.42cvss 7.5epss 0.02

    sylius/paypal-plugin is a paypal plugin for the Sylius development platform. In affected versions the URL to the payment page done after checkout was created with autoincremented payment id (/pay-with-paypal/{id}) and therefore it was easy to predict. The problem is that the…