Approved changes feed: RSS · Atom

cpe:2.3:a:sage:easypay:10.7.5.10:*:*:*:*:*:*:*

part: a version: 10.7.5.10 update: *

VendorSage (c8b89926-672a-55fd-8b90-8159b08c65cc)
ProductEasypay (e82f8304-fb47-57c4-b716-bc69440d4a42)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-13893 vulnerable 2026-06-08 05:18:01.300999 Details available
Multiple stored cross-site scripting (XSS) vulnerabilities in Sage EasyPay 10.7.5.10 allow authenticated attackers to inject arbitrary web script or HTML via multiple parameters through Unicode Transformations (Best-fit Mapping), as demonstrated by the full-width variants of the less-than sign (%EF%BC%9C) and greater-than sign (%EF%BC%9E).
Published: 2020-10-18T18:55:24.000Z
Updated: 2024-08-04T12:32:14.270Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.