EUVD-2026-112148

Shopper is a Headless e-commerce Admin Panel. From 2.8.0 until 2.8.1, three Shopper Livewire admin components retain authorization gaps after the earlier team-settings authorization fix. A staff member with only viewusers and accessdashboard can mutate permissions, create an administrator, or...

paypal/invoice-sdk-php reflected XSS

paypal/invoice-sdk-php is vulnerable to reflected XSS in samples/permissions.php via the permToken parameter, resulting in code execution...

CVE-2021-29026: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/admin/permissions.php URI...

PT-2021-18030

Name of the Vulnerable Software and Affected Versions: Bitweaver version 3.1.0 Description: A cross-site scripting XSS issue allows remote attackers to inject JavaScript via the "/users/admin/permissions.php" API endpoint. This enables attackers to execute malicious scripts on the client-side...

Cross-site Scripting (XSS)

paypal/invoice-sdk-php is vulnerable to cross-site scripting XSS attacks. The vulnerability exists due to the lack of sanitization of permToken and allows arbitrary scripts to be rendered in samples/permissions.php...

CVE-2017-6213

paypal/invoice-sdk-php is vulnerable to reflected XSS in samples/permissions.php via the permToken parameter, resulting in code execution...

CVE-2017-6213

paypal/invoice-sdk-php is affected by a reflected XSS vulnerability in samples/permissions.php through the permToken parameter, which can lead to code execution. The affected component is the PHP-based PayPal invoice SDK; the underlying issue is lack of input sanitization on permToken. Public det...

CVE-2017-6213: Improper Neutralization of Input During Web Page Generation

paypal/invoice-sdk-php is vulnerable to reflected XSS in samples/permissions.php via the permToken parameter, resulting in code execution...

PT-2018-8320

Name of the Vulnerable Software and Affected Versions paypal/invoice-sdk-php affected versions not specified Description The issue concerns a reflected XSS in the samples/permissions.php file via the permToken parameter, which can lead to code execution. Recommendations At the moment, there is no...