CVE-2026-4547

A security vulnerability has been detected in mickasmt next-saas-stripe-starter 1.0.0. Affected is the function generateUserStripe of the file actions/generate-user-stripe.ts of the component Checkout Handler. The manipulation of the argument priceId leads to business logic errors. The attack may be initiated remotely.

Score

CVSS 4.0 5.3 Medium

Status

Deferred - cna@vuldb.com

Published

2026-03-22

Last modified

2026-03-23

Weaknesses

CWE-840

Affected products

• Next-saas-stripe-starter (Mickasmt)

References

• https://vuldb.com/?ctiid.352374
• https://vuldb.com/?id.352374
• https://vuldb.com/?submit.774804