CNNVD-202601-3063 Information
Jan 19, 2026
cve
CNNVD ID
CNNVD-202601-3063
Related CVE
- CNNVD Published: 2026-01-19
Description (Chinese)
mpay是中国technical-laohu开源的一款便捷收款工具。 mpay 1.2.4及之前版本存在代码注入漏洞，该漏洞源于对参数Nickname的错误操作，可能导致跨站脚本攻击。
Description (English)
mpay is an easy-to-receiving tool from China ’ s telenic-laohu open source. mpay 1.2.4 and previous versions contain code-injecting holes, which stem from a wrong operation on the parameter Nickname and may result in a cross-station script attack.
Hazard Level
Critical
Vulnerability Type
代码注入
Affected Vendor
technical-laohu
Published
2026-01-19
Last Modified
2026-02-24
References
https://github.com/bdkuzma/vuln/issues/16 https://vuldb.com/?ctiid.341744 https://vuldb.com/?id.341744 https://vuldb.com/?submit.735773
Share on: