CVE-2026-1152 | technical-laohu mpay up to 1.2.4 QR Code Image codeimg unrestricted upload

A vulnerability was found in technical-laohu mpay up to 1.2.4 and classified as critical. The impacted element is an unknown function of the component QR Code Image Handler. Such manipulation of the argument codeimg leads to unrestricted upload.

This vulnerability is traded as CVE-2026-1152. The attack may be launched remotely. Furthermore, there is an exploit available.