https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-21T12:38:28.212331+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-13461 CVE-2026-13461 — PayRange version 7.0.7 contains a JavaScript injection vulnerability 2026-10-21T12:38:28.213491+00:00

Affected: PayRange

When coupled with the SSL bypass vulnerability, JavaScript can be injected into a WebView in the PayRange version 7.0.7 app. The injection of specific JavaScript function calls allows the attacker to escape the WebView sandbox and perform a number of dangerous actions on the user's device.