Information disclosure

2018-04-2716:29:00

PRIOn knowledge base

www.prio-n.com

7.9 High

AI Score

Confidence

Low

0.009 Low

EPSS

Percentile

82.9%

The WebHybridClient class in PayPal 5.3 and earlier for Android allows remote attackers to execute arbitrary JavaScript on the system.

CPENameOperatorVersion
paypalle5.3

CPE	Name	Operator	Version
	paypal	le	5.3

References

exchange.xforce.ibmcloud.com/vulnerabilities/92099

labs.mwrinfosecurity.com/advisories/paypal-remote-code-execution/