PT-2026-87108

CVE-2026-16025

·

Published

2026-09-08

·

Updated

2026-10-01

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions PayTR Virtual Pos iFrame API WHMCS Module versions 9.0.0 through 9.0.2
Description Improper validation of the specified quantity in the input allows for input data manipulation within the PayTR Virtual Pos iFrame API WHMCS Module.
Recommendations Update PayTR Virtual Pos iFrame API WHMCS Module to version 9.0.3.
Exploitability
Fix
Researchers
Vendors
Affected products
Weakness enumeration
CWE-1284: Improper Validation of Specified Quantity in Input
Related identifiers
CVE-2026-16025
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com