VYPR

PayPal IPN Handler

by Zen Cart

CVEs (1)

  • CVE-2026-108826HigOct 12, 2026
    risk 0.40cvss 7.3epss —

    A vulnerability was found in Zen Cart up to 2.2.2. This impacts the function zen_db_perform in the library includes/modules/payment/paypaldp.php of the component PayPal IPN Handler. Performing a manipulation of the argument txn_id results in sql injection. The attack can be…