Skip to content

Vendor

technical-laohu vulnerabilities

3 published CVES affecting technical-laohu, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
3
Critical
0
High
0
Medium
3
Low
0
Unscored
0
CISA KEV
0
Atom feed of technical-laohu alerts

Products

Latest technical-laohu CVEs

Newest publication first

  1. CVE-2026-1153 technical-laohu mpay cross-site request forgery

    Published
    MediumCVSS 5.3 EPSS 0.26%

    A vulnerability was detected in technical-laohu mpay up to 1.2.4. This affects an unknown function. Performing a manipulation results in cross-site request forgery. Remote exploitation of the attack is possible. The exploit is now public and may be used.

  2. CVE-2026-1152 technical-laohu mpay QR Code Image unrestricted upload

    Published
    MediumCVSS 5.1 EPSS 0.36%

    A security vulnerability has been detected in technical-laohu mpay up to 1.2.4. The impacted element is an unknown function of the component QR Code Image Handler. Such manipulation of the argument codeimg leads to unrestricted upload. The attack may be launched remotely. The exp...

  3. CVE-2026-1151 technical-laohu mpay User Center cross site scripting

    Published
    MediumCVSS 4.8 EPSS 0.23%

    A weakness has been identified in technical-laohu mpay up to 1.2.4. The affected element is an unknown function of the component User Center. This manipulation of the argument Nickname causes cross site scripting. The attack may be initiated remotely. The exploit has been made av...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.