{"id":3042,"date":"2025-12-31T02:01:10","date_gmt":"2025-12-31T02:01:10","guid":{"rendered":"https:\/\/www.ucartz.com\/updates\/thanh-toan-quet-ma-qr-code-tu-dong-stored-cross-site-scripting-vulnerability-cve-2024-8914-high-severity\/"},"modified":"2025-12-31T02:01:12","modified_gmt":"2025-12-31T02:01:12","slug":"thanh-toan-quet-ma-qr-code-tu-dong-stored-cross-site-scripting-vulnerability-cve-2024-8914-high-severity","status":"publish","type":"post","link":"https:\/\/www.ucartz.com\/updates\/thanh-toan-quet-ma-qr-code-tu-dong-stored-cross-site-scripting-vulnerability-cve-2024-8914-high-severity\/","title":{"rendered":"Thanh To\u00e1n Qu\u00e9t M\u00e3 QR Code T\u1ef1 \u0110\u1ed9ng Stored Cross-Site Scripting Vulnerability (CVE-2024-8914) \u2014 High Severity"},"content":{"rendered":"<h2>Understanding the Risk: Stored Cross-Site Scripting in WordPress QR Code Plugin<\/h2>\n<p>A significant security flaw, identified as CVE-2024-8914, has been discovered in the &#8220;Thanh To\u00e1n Qu\u00e9t M\u00e3 QR Code T\u1ef1 \u0110\u1ed9ng \u2013 MoMo, ViettelPay, VNPay v\u00e0 40 ng\u00e2n h\u00e0ng Vi\u1ec7t Nam&#8221; plugin for WordPress. This vulnerability, categorized as Stored Cross-Site Scripting (XSS), poses a high risk to websites using the affected plugin. It could allow malicious actors to inject harmful code into your website, which then executes in the browsers of unsuspecting users visiting the compromised pages.<\/p>\n<p>This type of attack is particularly dangerous because the malicious script is stored directly on the vulnerable server. When a user visits a page containing this script, their browser executes it without realizing it&#8217;s from an untrusted source. This can lead to various problems, including stealing user session cookies, redirecting users to malicious websites, or defacing the website.<\/p>\n<h2>CVE Details<\/h2>\n<ul>\n<li><strong>Product:<\/strong> Thanh To\u00e1n Qu\u00e9t M\u00e3 QR Code T\u1ef1 \u0110\u1ed9ng \u2013 MoMo, ViettelPay, VNPay v\u00e0 40 ng\u00e2n h\u00e0ng Vi\u1ec7t Nam plugin for WordPress<\/li>\n<li><strong>Published Date:<\/strong> September 25, 2024<\/li>\n<li><strong>Severity:<\/strong> High<\/li>\n<li><strong>Status:<\/strong> Analyzed<\/li>\n<\/ul>\n<h2>Affected Products<\/h2>\n<p>The Stored Cross-Site Scripting (XSS) vulnerability affects all versions of the &#8220;Thanh To\u00e1n Qu\u00e9t M\u00e3 QR Code T\u1ef1 \u0110\u1ed9ng \u2013 MoMo, ViettelPay, VNPay v\u00e0 40 ng\u00e2n h\u00e0ng Vi\u1ec7t Nam&#8221; plugin for WordPress up to, and including, version 2.0.1.<\/p>\n<h2>Current Status<\/h2>\n<p>The vulnerability has been thoroughly analyzed and publicly disclosed. Users running the affected plugin versions are at risk. It is critical for website administrators and developers to take immediate action to protect their sites.<\/p>\n<h2>Severity Level<\/h2>\n<p>This vulnerability is rated as <strong>High Severity<\/strong>, with a CVSS (Common Vulnerability Scoring System) score of 7.2. A high severity rating indicates that the flaw can be easily exploited and could lead to significant impact on the confidentiality, integrity, or availability of your website and user data.<\/p>\n<h2>Possible Solutions<\/h2>\n<p>To secure your WordPress website from this XSS vulnerability, the primary course of action is to update your &#8220;Thanh To\u00e1n Qu\u00e9t M\u00e3 QR Code T\u1ef1 \u0110\u1ed9ng \u2013 MoMo, ViettelPay, VNPay v\u00e0 40 ng\u00e2n h\u00e0ng Vi\u1ec7t Nam&#8221; plugin to a version <strong>greater than 2.0.1<\/strong> as soon as an official patch is released by the developer. Always back up your website before performing any updates.<\/p>\n<p>The root cause of this vulnerability lies in the plugin&#8217;s improper use of the <code>wp_kses_allowed_html<\/code> function, which incorrectly allowed the <code>onclick<\/code> attribute for certain HTML elements. While awaiting an official update, you should:<\/p>\n<ol>\n<li><strong>Monitor for Updates:<\/strong> Regularly check the official WordPress plugin repository page for &#8220;Thanh To\u00e1n Qu\u00e9t M\u00e3 QR Code T\u1ef1 \u0110\u1ed9ng&#8221; for new versions that address this flaw.<\/li>\n<li><strong>Web Application Firewall (WAF):<\/strong> Employ a robust WAF solution. A WAF can help mitigate XSS attacks by filtering out malicious input before it reaches your application and blocking suspicious requests.<\/li>\n<li><strong>Temporarily Deactivate:<\/strong> If updating is not immediately possible and your website can function without this plugin, consider deactivating it temporarily until a secure version is available.<\/li>\n<\/ol>\n<h2>References<\/h2>\n<p>https:\/\/plugins.trac.wordpress.org\/browser\/bck-tu-dong-xac-nhan-thanh-toan-chuyen-khoan-ngan-hang\/trunk\/inc\/functions.php#L184<br \/>https:\/\/wordpress.org\/plugins\/bck-tu-dong-xac-nhan-thanh-toan-chuyen-khoan-ngan-hang\/#developers<br \/>https:\/\/www.wordfence.com\/threat-intel\/vulnerabilities\/id\/8ef7c48b-e8f2-40bd-aa48-191059e15453?source=cve<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Understanding the Risk: Stored Cross-Site Scripting in WordPress QR Code Plugin A significant security flaw, identified as CVE-2024-8914, has been discovered in the &#8220;Thanh To\u00e1n Qu\u00e9t M\u00e3 QR Code T\u1ef1 \u0110\u1ed9ng \u2013 MoMo, ViettelPay, VNPay v\u00e0 40 ng\u00e2n h\u00e0ng Vi\u1ec7t Nam&#8221; plugin for WordPress. This vulnerability, categorized as Stored Cross-Site Scripting (XSS), poses a high [&hellip;]<\/p>\n","protected":false},"author":17,"featured_media":2545,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[896,895,695,719,759],"class_list":["post-3042","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-security","tag-qr-code-plugin","tag-thanh-toan-quet-ma-qr-code-tu-dong","tag-web-security","tag-wordpress-security","tag-xss-vulnerability"],"blocksy_meta":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.5 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Thanh To\u00e1n Qu\u00e9t M\u00e3 QR Code T\u1ef1 \u0110\u1ed9ng Stored Cross-Site Scripting Vulnerability (CVE-2024-8914) \u2014 High Severity - Web Hosting and IT Consultancy Services<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.ucartz.com\/updates\/thanh-toan-quet-ma-qr-code-tu-dong-stored-cross-site-scripting-vulnerability-cve-2024-8914-high-severity\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Thanh To\u00e1n Qu\u00e9t M\u00e3 QR Code T\u1ef1 \u0110\u1ed9ng Stored Cross-Site Scripting Vulnerability (CVE-2024-8914) \u2014 High Severity - Web Hosting and IT Consultancy Services\" \/>\n<meta property=\"og:description\" content=\"Understanding the Risk: Stored Cross-Site Scripting in WordPress QR Code Plugin A significant security flaw, identified as CVE-2024-8914, has been discovered in the &#8220;Thanh To\u00e1n Qu\u00e9t M\u00e3 QR Code T\u1ef1 \u0110\u1ed9ng \u2013 MoMo, ViettelPay, VNPay v\u00e0 40 ng\u00e2n h\u00e0ng Vi\u1ec7t Nam&#8221; plugin for WordPress. This vulnerability, categorized as Stored Cross-Site Scripting (XSS), poses a high [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.ucartz.com\/updates\/thanh-toan-quet-ma-qr-code-tu-dong-stored-cross-site-scripting-vulnerability-cve-2024-8914-high-severity\/\" \/>\n<meta property=\"og:site_name\" content=\"Web Hosting and IT Consultancy Services\" \/>\n<meta property=\"article:published_time\" content=\"2025-12-31T02:01:10+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-12-31T02:01:12+00:00\" \/>\n<meta name=\"author\" content=\"Alex Joseph\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Alex Joseph\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/thanh-toan-quet-ma-qr-code-tu-dong-stored-cross-site-scripting-vulnerability-cve-2024-8914-high-severity\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/thanh-toan-quet-ma-qr-code-tu-dong-stored-cross-site-scripting-vulnerability-cve-2024-8914-high-severity\\\/\"},\"author\":{\"name\":\"Alex Joseph\",\"@id\":\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/#\\\/schema\\\/person\\\/1ba9bfab02a76dee216c9f55bb634e56\"},\"headline\":\"Thanh To\u00e1n Qu\u00e9t M\u00e3 QR Code T\u1ef1 \u0110\u1ed9ng Stored Cross-Site Scripting Vulnerability (CVE-2024-8914) \u2014 High Severity\",\"datePublished\":\"2025-12-31T02:01:10+00:00\",\"dateModified\":\"2025-12-31T02:01:12+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/thanh-toan-quet-ma-qr-code-tu-dong-stored-cross-site-scripting-vulnerability-cve-2024-8914-high-severity\\\/\"},\"wordCount\":547,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/thanh-toan-quet-ma-qr-code-tu-dong-stored-cross-site-scripting-vulnerability-cve-2024-8914-high-severity\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/wp-content\\\/uploads\\\/2025\\\/12\\\/Wordpress-Banner.webp\",\"keywords\":[\"QR Code Plugin\",\"Thanh To\u00e1n Qu\u00e9t M\u00e3 QR Code T\u1ef1 \u0110\u1ed9Ng\",\"Web Security\",\"WordPress Security\",\"XSS Vulnerability\"],\"articleSection\":[\"Security\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/thanh-toan-quet-ma-qr-code-tu-dong-stored-cross-site-scripting-vulnerability-cve-2024-8914-high-severity\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/thanh-toan-quet-ma-qr-code-tu-dong-stored-cross-site-scripting-vulnerability-cve-2024-8914-high-severity\\\/\",\"url\":\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/thanh-toan-quet-ma-qr-code-tu-dong-stored-cross-site-scripting-vulnerability-cve-2024-8914-high-severity\\\/\",\"name\":\"Thanh To\u00e1n Qu\u00e9t M\u00e3 QR Code T\u1ef1 \u0110\u1ed9ng Stored Cross-Site Scripting Vulnerability (CVE-2024-8914) \u2014 High Severity - Web Hosting and IT Consultancy Services\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/thanh-toan-quet-ma-qr-code-tu-dong-stored-cross-site-scripting-vulnerability-cve-2024-8914-high-severity\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/thanh-toan-quet-ma-qr-code-tu-dong-stored-cross-site-scripting-vulnerability-cve-2024-8914-high-severity\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/wp-content\\\/uploads\\\/2025\\\/12\\\/Wordpress-Banner.webp\",\"datePublished\":\"2025-12-31T02:01:10+00:00\",\"dateModified\":\"2025-12-31T02:01:12+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/thanh-toan-quet-ma-qr-code-tu-dong-stored-cross-site-scripting-vulnerability-cve-2024-8914-high-severity\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/thanh-toan-quet-ma-qr-code-tu-dong-stored-cross-site-scripting-vulnerability-cve-2024-8914-high-severity\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/thanh-toan-quet-ma-qr-code-tu-dong-stored-cross-site-scripting-vulnerability-cve-2024-8914-high-severity\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/wp-content\\\/uploads\\\/2025\\\/12\\\/Wordpress-Banner.webp\",\"contentUrl\":\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/wp-content\\\/uploads\\\/2025\\\/12\\\/Wordpress-Banner.webp\",\"width\":1024,\"height\":576},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/thanh-toan-quet-ma-qr-code-tu-dong-stored-cross-site-scripting-vulnerability-cve-2024-8914-high-severity\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Thanh To\u00e1n Qu\u00e9t M\u00e3 QR Code T\u1ef1 \u0110\u1ed9ng Stored Cross-Site Scripting Vulnerability (CVE-2024-8914) \u2014 High Severity\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/#website\",\"url\":\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/\",\"name\":\"Web Hosting and IT Consultancy Services\",\"description\":\"Discover the Potential of Digital Transformation through Effortless Hosting and Professional IT Consulting!\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/#organization\",\"name\":\"Web Hosting and IT Consultancy Services\",\"url\":\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/wp-content\\\/uploads\\\/2025\\\/12\\\/ucartzLogo-1.png\",\"contentUrl\":\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/wp-content\\\/uploads\\\/2025\\\/12\\\/ucartzLogo-1.png\",\"width\":165,\"height\":50,\"caption\":\"Web Hosting and IT Consultancy Services\"},\"image\":{\"@id\":\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/#\\\/schema\\\/person\\\/1ba9bfab02a76dee216c9f55bb634e56\",\"name\":\"Alex Joseph\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/0969fa5fefa2739cbd6fd5eaf04fed619e19f40d42e4a42650090606944ff747?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/0969fa5fefa2739cbd6fd5eaf04fed619e19f40d42e4a42650090606944ff747?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/0969fa5fefa2739cbd6fd5eaf04fed619e19f40d42e4a42650090606944ff747?s=96&d=mm&r=g\",\"caption\":\"Alex Joseph\"},\"description\":\"Alex Joseph is a Senior Support Staff professional with deep experience in server management, web hosting technologies, and cybersecurity operations. He works daily with Linux servers, cloud platforms, performance tuning, and security hardening, giving him strong real-world technical knowledge. Along with his support role, he write about security best practices, hosting infrastructure, and software management.\",\"url\":\"https:\\\/\\\/www.ucartz.com\\\/updates\\\/author\\\/alexjoseph\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Thanh To\u00e1n Qu\u00e9t M\u00e3 QR Code T\u1ef1 \u0110\u1ed9ng Stored Cross-Site Scripting Vulnerability (CVE-2024-8914) \u2014 High Severity - Web Hosting and IT Consultancy Services","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.ucartz.com\/updates\/thanh-toan-quet-ma-qr-code-tu-dong-stored-cross-site-scripting-vulnerability-cve-2024-8914-high-severity\/","og_locale":"en_US","og_type":"article","og_title":"Thanh To\u00e1n Qu\u00e9t M\u00e3 QR Code T\u1ef1 \u0110\u1ed9ng Stored Cross-Site Scripting Vulnerability (CVE-2024-8914) \u2014 High Severity - Web Hosting and IT Consultancy Services","og_description":"Understanding the Risk: Stored Cross-Site Scripting in WordPress QR Code Plugin A significant security flaw, identified as CVE-2024-8914, has been discovered in the &#8220;Thanh To\u00e1n Qu\u00e9t M\u00e3 QR Code T\u1ef1 \u0110\u1ed9ng \u2013 MoMo, ViettelPay, VNPay v\u00e0 40 ng\u00e2n h\u00e0ng Vi\u1ec7t Nam&#8221; plugin for WordPress. This vulnerability, categorized as Stored Cross-Site Scripting (XSS), poses a high [&hellip;]","og_url":"https:\/\/www.ucartz.com\/updates\/thanh-toan-quet-ma-qr-code-tu-dong-stored-cross-site-scripting-vulnerability-cve-2024-8914-high-severity\/","og_site_name":"Web Hosting and IT Consultancy Services","article_published_time":"2025-12-31T02:01:10+00:00","article_modified_time":"2025-12-31T02:01:12+00:00","author":"Alex Joseph","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Alex Joseph","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.ucartz.com\/updates\/thanh-toan-quet-ma-qr-code-tu-dong-stored-cross-site-scripting-vulnerability-cve-2024-8914-high-severity\/#article","isPartOf":{"@id":"https:\/\/www.ucartz.com\/updates\/thanh-toan-quet-ma-qr-code-tu-dong-stored-cross-site-scripting-vulnerability-cve-2024-8914-high-severity\/"},"author":{"name":"Alex Joseph","@id":"https:\/\/www.ucartz.com\/updates\/#\/schema\/person\/1ba9bfab02a76dee216c9f55bb634e56"},"headline":"Thanh To\u00e1n Qu\u00e9t M\u00e3 QR Code T\u1ef1 \u0110\u1ed9ng Stored Cross-Site Scripting Vulnerability (CVE-2024-8914) \u2014 High Severity","datePublished":"2025-12-31T02:01:10+00:00","dateModified":"2025-12-31T02:01:12+00:00","mainEntityOfPage":{"@id":"https:\/\/www.ucartz.com\/updates\/thanh-toan-quet-ma-qr-code-tu-dong-stored-cross-site-scripting-vulnerability-cve-2024-8914-high-severity\/"},"wordCount":547,"commentCount":0,"publisher":{"@id":"https:\/\/www.ucartz.com\/updates\/#organization"},"image":{"@id":"https:\/\/www.ucartz.com\/updates\/thanh-toan-quet-ma-qr-code-tu-dong-stored-cross-site-scripting-vulnerability-cve-2024-8914-high-severity\/#primaryimage"},"thumbnailUrl":"https:\/\/www.ucartz.com\/updates\/wp-content\/uploads\/2025\/12\/Wordpress-Banner.webp","keywords":["QR Code Plugin","Thanh To\u00e1n Qu\u00e9t M\u00e3 QR Code T\u1ef1 \u0110\u1ed9Ng","Web Security","WordPress Security","XSS Vulnerability"],"articleSection":["Security"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.ucartz.com\/updates\/thanh-toan-quet-ma-qr-code-tu-dong-stored-cross-site-scripting-vulnerability-cve-2024-8914-high-severity\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.ucartz.com\/updates\/thanh-toan-quet-ma-qr-code-tu-dong-stored-cross-site-scripting-vulnerability-cve-2024-8914-high-severity\/","url":"https:\/\/www.ucartz.com\/updates\/thanh-toan-quet-ma-qr-code-tu-dong-stored-cross-site-scripting-vulnerability-cve-2024-8914-high-severity\/","name":"Thanh To\u00e1n Qu\u00e9t M\u00e3 QR Code T\u1ef1 \u0110\u1ed9ng Stored Cross-Site Scripting Vulnerability (CVE-2024-8914) \u2014 High Severity - Web Hosting and IT Consultancy Services","isPartOf":{"@id":"https:\/\/www.ucartz.com\/updates\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.ucartz.com\/updates\/thanh-toan-quet-ma-qr-code-tu-dong-stored-cross-site-scripting-vulnerability-cve-2024-8914-high-severity\/#primaryimage"},"image":{"@id":"https:\/\/www.ucartz.com\/updates\/thanh-toan-quet-ma-qr-code-tu-dong-stored-cross-site-scripting-vulnerability-cve-2024-8914-high-severity\/#primaryimage"},"thumbnailUrl":"https:\/\/www.ucartz.com\/updates\/wp-content\/uploads\/2025\/12\/Wordpress-Banner.webp","datePublished":"2025-12-31T02:01:10+00:00","dateModified":"2025-12-31T02:01:12+00:00","breadcrumb":{"@id":"https:\/\/www.ucartz.com\/updates\/thanh-toan-quet-ma-qr-code-tu-dong-stored-cross-site-scripting-vulnerability-cve-2024-8914-high-severity\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.ucartz.com\/updates\/thanh-toan-quet-ma-qr-code-tu-dong-stored-cross-site-scripting-vulnerability-cve-2024-8914-high-severity\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.ucartz.com\/updates\/thanh-toan-quet-ma-qr-code-tu-dong-stored-cross-site-scripting-vulnerability-cve-2024-8914-high-severity\/#primaryimage","url":"https:\/\/www.ucartz.com\/updates\/wp-content\/uploads\/2025\/12\/Wordpress-Banner.webp","contentUrl":"https:\/\/www.ucartz.com\/updates\/wp-content\/uploads\/2025\/12\/Wordpress-Banner.webp","width":1024,"height":576},{"@type":"BreadcrumbList","@id":"https:\/\/www.ucartz.com\/updates\/thanh-toan-quet-ma-qr-code-tu-dong-stored-cross-site-scripting-vulnerability-cve-2024-8914-high-severity\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.ucartz.com\/updates\/"},{"@type":"ListItem","position":2,"name":"Thanh To\u00e1n Qu\u00e9t M\u00e3 QR Code T\u1ef1 \u0110\u1ed9ng Stored Cross-Site Scripting Vulnerability (CVE-2024-8914) \u2014 High Severity"}]},{"@type":"WebSite","@id":"https:\/\/www.ucartz.com\/updates\/#website","url":"https:\/\/www.ucartz.com\/updates\/","name":"Web Hosting and IT Consultancy Services","description":"Discover the Potential of Digital Transformation through Effortless Hosting and Professional IT Consulting!","publisher":{"@id":"https:\/\/www.ucartz.com\/updates\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.ucartz.com\/updates\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.ucartz.com\/updates\/#organization","name":"Web Hosting and IT Consultancy Services","url":"https:\/\/www.ucartz.com\/updates\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.ucartz.com\/updates\/#\/schema\/logo\/image\/","url":"https:\/\/www.ucartz.com\/updates\/wp-content\/uploads\/2025\/12\/ucartzLogo-1.png","contentUrl":"https:\/\/www.ucartz.com\/updates\/wp-content\/uploads\/2025\/12\/ucartzLogo-1.png","width":165,"height":50,"caption":"Web Hosting and IT Consultancy Services"},"image":{"@id":"https:\/\/www.ucartz.com\/updates\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/www.ucartz.com\/updates\/#\/schema\/person\/1ba9bfab02a76dee216c9f55bb634e56","name":"Alex Joseph","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/0969fa5fefa2739cbd6fd5eaf04fed619e19f40d42e4a42650090606944ff747?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/0969fa5fefa2739cbd6fd5eaf04fed619e19f40d42e4a42650090606944ff747?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/0969fa5fefa2739cbd6fd5eaf04fed619e19f40d42e4a42650090606944ff747?s=96&d=mm&r=g","caption":"Alex Joseph"},"description":"Alex Joseph is a Senior Support Staff professional with deep experience in server management, web hosting technologies, and cybersecurity operations. He works daily with Linux servers, cloud platforms, performance tuning, and security hardening, giving him strong real-world technical knowledge. Along with his support role, he write about security best practices, hosting infrastructure, and software management.","url":"https:\/\/www.ucartz.com\/updates\/author\/alexjoseph\/"}]}},"_links":{"self":[{"href":"https:\/\/www.ucartz.com\/updates\/wp-json\/wp\/v2\/posts\/3042","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.ucartz.com\/updates\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.ucartz.com\/updates\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.ucartz.com\/updates\/wp-json\/wp\/v2\/users\/17"}],"replies":[{"embeddable":true,"href":"https:\/\/www.ucartz.com\/updates\/wp-json\/wp\/v2\/comments?post=3042"}],"version-history":[{"count":1,"href":"https:\/\/www.ucartz.com\/updates\/wp-json\/wp\/v2\/posts\/3042\/revisions"}],"predecessor-version":[{"id":3043,"href":"https:\/\/www.ucartz.com\/updates\/wp-json\/wp\/v2\/posts\/3042\/revisions\/3043"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.ucartz.com\/updates\/wp-json\/wp\/v2\/media\/2545"}],"wp:attachment":[{"href":"https:\/\/www.ucartz.com\/updates\/wp-json\/wp\/v2\/media?parent=3042"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.ucartz.com\/updates\/wp-json\/wp\/v2\/categories?post=3042"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.ucartz.com\/updates\/wp-json\/wp\/v2\/tags?post=3042"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}