paypal/invoice-sdk-php reflected XSS

paypal/invoice-sdk-php is vulnerable to reflected XSS in samples/permissions.php via the permToken parameter, resulting in code execution...

Cross-site Scripting (XSS)

paypal/invoice-sdk-php is vulnerable to cross-site scripting XSS attacks. The vulnerability exists due to the lack of sanitization of permToken and allows arbitrary scripts to be rendered in samples/permissions.php...

CVE-2017-6213

paypal/invoice-sdk-php is vulnerable to reflected XSS in samples/permissions.php via the permToken parameter, resulting in code execution...

CVE-2017-6213

paypal/invoice-sdk-php is affected by a reflected XSS vulnerability in samples/permissions.php through the permToken parameter, which can lead to code execution. The affected component is the PHP-based PayPal invoice SDK; the underlying issue is lack of input sanitization on permToken. Public det...