CVE-2017-6213

Published August 2nd, 2018

View on NVD ↗

CVSS v3

N/A

CVSS v2

3.5

LOW

Affected

1

PROJECT

Description

paypal/invoice-sdk-php is vulnerable to reflected XSS in samples/permissions.php via the permToken parameter, resulting in code execution.

paypal/invoice-sdk-phpUNAVAILABLE

PHP SDK for integrating with PayPal's Invoicing API

GitHub