PT-2026-88898
CVE-2026-16272
·
Published
2026-09-09
·
Updated
2026-10-01
Description by
CVSS 3.1
9.1
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Name of the Vulnerable Software and Affected Versions
PayTR Virtual Pos iFrame API WHMCS Module versions 9.0.0 through 9.0.2
Description
The PayTR Virtual Pos iFrame API WHMCS Module contains a flaw involving the use of a less trusted source, which allows for the exploitation of trusted identifiers.
Recommendations
Update PayTR Virtual Pos iFrame API WHMCS Module to version 9.0.3.
Found an issue in the description? Have something to add? Feel free to write us 👾