CVE-2023-23941

SwagPayPal is a PayPal integration for shopware/platform. If JavaScript-based PayPal checkout methods are used (PayPal Plus, Smart Payment Buttons, SEPA, Pay Later, Venmo, Credit card), the amount and item list sent to PayPal may not be identical to the one in the created order. The problem has been fixed with version 5.4.4. As a workaround, disable the aforementioned payment methods or use the Security Plugin in version >= 1.0.21.

• CWE-345

• https://github.com/shopware/SwagPayPal/commit/57db5f4a57ef0a1646b509b415de9f03bf441b08Patch, Third Party Advisory
• https://github.com/shopware/SwagPayPal/security/advisories/GHSA-vxpm-8hcp-qh27Third Party Advisory
• https://github.com/shopware/SwagPayPal/commit/57db5f4a57ef0a1646b509b415de9f03bf441b08Patch, Third Party Advisory
• https://github.com/shopware/SwagPayPal/security/advisories/GHSA-vxpm-8hcp-qh27Third Party Advisory

Published

Feb 3, 2023

Last Modified

Jun 17, 2026

Status

Modified

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-23936Undici is an HTTP/1.1 client for Node.js. Starting with vers…5.4
• CVE-2023-23937Pimcore is an Open Source Data & Experience Management Platf…5.4
• CVE-2023-23938Tuleap is a Free & Source tool for end to end traceability o…4.8
• CVE-2023-23939Azure/setup-kubectl is a GitHub Action for installing Kubect…7
• CVE-2023-2394A vulnerability was found in Netgear SRX5308 up to 4.3.5-3. …4.8
• CVE-2023-23940OpenZeppelin Contracts for Cairo is a library for secure sma…5.3
• CVE-2023-23942The Nextcloud Desktop Client is a tool to synchronize files …6.1
• CVE-2023-23943Nextcloud mail is an email app for the nextcloud home server…4.3
• CVE-2023-23944Nextcloud mail is an email app for the nextcloud home server…6.5
• CVE-2023-23946Git, a revision control system, is vulnerable to path traver…7.5
• CVE-2023-23947Argo CD is a declarative, GitOps continuous delivery tool fo…8.5
• CVE-2023-23948The ownCloud Android app allows ownCloud users to access, sh…5.5