CVE-2026-129142 | itwanger paicoding Payment Notifications notify-system-item.html NotifyMsgListener display_name cross site scripting

November 13, 2026 Yanac

A vulnerability categorized as problematic has been discovered in itwanger paicoding. Affected by this vulnerability is the function NotifyMsgListener of the file notify-system-item.html of the component Payment Notifications. Such manipulation of the argument display_name leads to cross site scripting.

This vulnerability is listed as CVE-2026-129142. The attack may be performed from remote. There is no available exploit.

It is advisable to implement a patch to correct this issue.VulDB Recent EntriesRead More