Skip to content
6.1 Medium

CVE-2023-6786 The Payment Gateway for Telcell WordPress plugin through 2.0.1 does not validate the api_url parameter before…

Description

The Payment Gateway for Telcell WordPress plugin through 2.0.1 does not validate the api_url parameter before redirecting the user to its value, leading to an Open Redirect issue

Affected products and versions

Product Affected versions Fixed in
Payment Gateway for Telcell 2.0 earliest → 2.0.1 No fix stated
The 2 CVEs of Payment Gateway for Telcell →
Track this CVE