OCTOBER 6, 2026
Live Feed
Back to database
Case File

CVE-2026-103346

HIGH · CVSS 7.1 EPSS 0.15%

Source: NVD + CISA KEV + EPSS · Published 2026-10-06 · Last synced 2026-10-06

CyberRota Analysis

AI-Generated

The Tomlister Payflex Payment Gateway is vulnerable to a reflected cross-site scripting (XSS) flaw, which allows attackers to inject malicious scripts into web pages viewed by users. This vulnerability can lead to unauthorized actions on behalf of users, data theft, or session hijacking. Organizations utilizing versions up to 2.7.1 of the Payflex Payment Gateway should prioritize patching this issue to mitigate potential security risks.

CVE
CVE-2026-103346
Severity
HIGH
CVSS
7.1
EPSS
0.15%

Original NVD Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tomlister Payflex Payment Gateway payflex-payment-gateway allows Reflected XSS.This issue affects Payflex Payment Gateway: from n/a through 2.7.1.