CVE-2021-28110: Compassplus Tranzware E-Commerce Payment Gateway

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

/exec in TranzWare e-Commerce Payment Gateway (TWEC PG) before 3.1.27.5 had a vulnerability in its XML parser.

Affected products

• Compassplus Tranzware E-Commerce Payment Gateway: before 3.1.27.5 (fixed in 3.1.27.5)

Published 2021-03-19. Last modified 2026-06-17.