Cross-site Scripting (XSS)

heartland-php is vulnerable to reflected cross-site scripting XSS attacks. These attacks are possible because the parameters are not filtered before being used in the code...

heartland-php reflective cross-site scripting vulnerability

heartland-php allows PHP applications to integrate with Heartland's Portico Gateway API and other APIs such as MasterPass and PayPal Express Checkout. A reflected cross-site scripting vulnerability exists in heartland-php, which can be exploited by an attacker to conduct reflected cross-site...