yuwkaaa/CVE-2026-113468

PoC

forgeable PayPal payment callback in TYPO3 EXT:shop

view exploit source poc_in_githubauthor yuwkaaapublished 2026-10-20catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2026-113468US	—OT elevated	0.44% (38th)	Exploit	2026-10-20
The payment notification endpoint for PayPal accepts incoming data without verifying that it comes from the payment provider. Any site visitor can overwrite the stored payment noti…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.