PAYFORT payfort-php-SDK cross-site scripting vulnerability

PayFort is an online payment gateway. payfort-php-SDK is the PayFort payment gateway SDK. A cross-site scripting vulnerability exists in Amazon PAYFORT payfort-php-SDK on 2018-04-26 and earlier versions, which can be exploited by an attacker via the error.php errormsg parameter to conduct a...

PT-2018-14849

Name of the Vulnerable Software and Affected Versions payfort-php-SDK versions through 2018-04-26 Description The issue concerns a security problem where an attacker can execute malicious scripts. This is achieved by exploiting the fort id parameter in the success.php file, allowing for malicious...

PT-2018-14847

Name of the Vulnerable Software and Affected Versions payfort-php-SDK versions through 2018-04-26 Description The issue concerns an XSS vulnerability via the paymentMethod parameter in the route.php file. Recommendations For payfort-php-SDK versions through 2018-04-26, consider restricting access...

CVE-2018-19188: Improper Neutralization of Input During Web Page Generation

The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via the success.php fortid parameter...

CVE-2018-19190: Improper Neutralization of Input During Web Page Generation

The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via the error.php errormsg parameter...