Lucene search

K
osvGoogleOSV:CVE-2017-6099
HistoryFeb 24, 2017 - 2:59 a.m.

CVE-2017-6099

2017-02-2402:59:01
Google
osv.dev
2

5.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

47.4%

Cross-site scripting (XSS) vulnerability in GetAuthDetails.html.php in PayPal PHP Merchant SDK (aka merchant-sdk-php) 3.9.1 allows remote attackers to inject arbitrary web script or HTML via the token parameter.

5.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

47.4%