Code injection

The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via the success.php fortid parameter...

CVE-2018-19187

The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via an arbitrary parameter name or value that is mishandled in a success.php echo statement...

besthosting.ua XSS vulnerability

Vulnerable URL: https://besthosting.ua/ru/success.php?order=42785=3.00%20$XXXX%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 69707...

beautysecrets.co.za XSS vulnerability

Vulnerable URL: http://www.beautysecrets.co.za/form-success.php?msg=RK%3E%3C%3E%3C%3E%3C%3E%3C%3E%3C%3E%3C%3E%3Cimg%20src=x%20onerror=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:|...