Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2020-28414 — Proof-of-concept for CVE-2020-28414: reflected XSS in TranzWare Payment Gateway 3.1.12.3.2. Demonstrates remote unauthenticated HTML injection via crafted URL. | Kitploit
Tools/GitHubGitHub/jet-pentest/cve-2020-28414
Vulnerability AnalysisWeb Application ExploitationInformation GatheringWeb SecurityPenetration Testing
GitHubjet-pentest/cve-2020-28414

CVE-2020-28414

Proof-of-concept for CVE-2020-28414: reflected XSS in TranzWare Payment Gateway 3.1.12.3.2. Demonstrates remote unauthenticated HTML injection via crafted URL.

View Repository
125 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2020-28414

[Suggested description]

A reflected cross-site scripting (XSS) vulnerability exists in the TranzWare Payment Gateway 3.1.12.3.2. A remote unauthenticated attacker is able to execute arbitrary HTML code via crafted url.

[Vulnerability Type]

Cross Site Scripting (XSS)

[Vendor of Product]

TranzWare

[Affected Product Code Base]

Payment Gateway 3.1.12.3.2.

[Attack Type]

Remote

[Impact Code execution]

true

[Has vendor confirmed or acknowledged the vulnerability?]

true

[Reference]

https://compassplus.com/solutions/tranzware/

[Discoverer]

Vladimir Rotanov (Jet Infosystems (jet.su), Moscow, Russia)

Download Tool