Lucene search
Veracode Vulnerability DatabaseVERACODE:7229HistoryAug 03, 2018 - 5:05 a.m.
Cross-site Scripting (XSS)
2018-08-0305:05:20
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.001 Low
EPSS
Percentile
23.7%
paypal/invoice-sdk-php is vulnerable to cross-site scripting (XSS) attacks. The vulnerability exists due to the lack of sanitization of permToken and allows arbitrary scripts to be rendered in samples/permissions.php.
| CPE | Name | Operator | Version |
|---|---|---|---|
| paypal/invoice-sdk-php | le | 3.9.0 |
Related
nvd
nvd
CVE-2017-6213
2018-08-02 21:29:00
osv
osv
CVE-2017-6213
2018-08-02 21:29:00
paypal/invoice-sdk-php reflected XSS
2022-05-14 02:58:17
prion
prion
Remote code execution
2018-08-02 21:29:00
cvelist
cvelist
CVE-2017-6213
2018-08-02 21:00:00
cve
cve
CVE-2017-6213
2018-08-02 21:29:00
github
github
paypal/invoice-sdk-php reflected XSS
2022-05-14 02:58:17