Lucene search

K
osvGoogleOSV:GHSA-P4G7-WJHQ-9R2H
HistoryMay 14, 2022 - 1:21 a.m.

PayPal PHP Merchant SDK Cross-site scripting (XSS) vulnerability

2022-05-1401:21:17
Google
osv.dev
4

5.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

47.4%

Cross-site scripting (XSS) vulnerability in GetAuthDetails.html.php in PayPal PHP Merchant SDK (aka merchant-sdk-php) 3.9.1 allows remote attackers to inject arbitrary web script or HTML via the token parameter.

5.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

47.4%