Cross-site Scripting (XSS)

paypal/adaptivepayments-sdk-php is vulnerable to cross-site scripting XSS. The vulnerability exists in the sample application where the value of $REQUEST'payKey' was not sanitized...

CVE-2017-6217: Improper Neutralization of Input During Web Page Generation

paypal/adaptivepayments-sdk-php v3.9.2 is vulnerable to a reflected XSS in the SetPaymentOptions.php resulting code execution...

PT-2019-8587

Name of the Vulnerable Software and Affected Versions paypal/adaptivepayments-sdk-php version 3.9.2 Description The issue is related to a reflected XSS in the SetPaymentOptions.php file, which can result in code execution. Recommendations For paypal/adaptivepayments-sdk-php version 3.9.2, update ...