Cross-site Scripting (XSS)

paypal/merchant-sdk-php is vulnerable to cross-site scriptingXSS attacks. The vulnerability exists due to insufficient filtration of user-supplied data in token HTTP GET parameter in samples/AccountAuthentication/GetAuthDetails.html.php, allowing a malicious user to inject and execute arbitrary w...

CVE-2017-6099

CVE-2017-6099 is an XSS vulnerability affecting PayPal PHP Merchant SDK (merchant-sdk-php)