Lucene search

K
osvGoogleOSV:GHSA-2QFV-WWFX-FH34
HistoryMay 14, 2022 - 2:58 a.m.

paypal/permissions-sdk-php reflected Cross-site Scripting (XSS)

2022-05-1402:58:18
Google
osv.dev
2

6.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

23.7%

paypal/permissions-sdk-php is vulnerable to reflected XSS in the samples/GetAccessToken.php verification_code parameter, resulting in code execution.

6.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

23.7%

Related for OSV:GHSA-2QFV-WWFX-FH34