Cross-site Scripting (XSS)

paypal/invoice-sdk-php is vulnerable to cross-site scripting XSS attacks. The vulnerability exists due to the lack of sanitization of permToken and allows arbitrary scripts to be rendered in samples/permissions.php...

CVE-2017-6213

paypal/invoice-sdk-php is vulnerable to reflected XSS in samples/permissions.php via the permToken parameter, resulting in code execution...

CVE-2017-6213

paypal/invoice-sdk-php is vulnerable to reflected XSS in samples/permissions.php via the permToken parameter, resulting in code execution...

CVE-2017-6213: Improper Neutralization of Input During Web Page Generation

paypal/invoice-sdk-php is vulnerable to reflected XSS in samples/permissions.php via the permToken parameter, resulting in code execution...

PT-2018-8320

Name of the Vulnerable Software and Affected Versions paypal/invoice-sdk-php affected versions not specified Description The issue concerns a reflected XSS in the samples/permissions.php file via the permToken parameter, which can lead to code execution. Recommendations At the moment, there is no...