🔍 What is Mpay?

Description coming soon...

🛡️ Security Overview

Click on a severity to filter vulnerabilities

⚠️ Known Vulnerabilities

CVE-2026-1153

MEDIUM CVSS 4.3 Jan 19, 2026

This CVE describes a Cross-Site Request Forgery (CSRF) vulnerability in technical-laohu mpay versions up to 1.2.4. Attackers can trick authenticated users into performing unintended actions by craftin...

CVE-2026-1152

MEDIUM CVSS 4.7 Jan 19, 2026

This vulnerability in technical-laohu mpay up to version 1.2.4 allows remote attackers to upload arbitrary files via the QR Code Image Handler component. The unrestricted file upload vulnerability can...

CVE-2026-1151

LOW CVSS 2.4 Jan 19, 2026

This vulnerability allows attackers to inject malicious scripts via the Nickname field in the User Center component of technical-laohu mpay. When exploited, it enables cross-site scripting attacks tha...