Lucene search
Veracode Vulnerability DatabaseVERACODE:7232HistoryAug 03, 2018 - 7:15 a.m.
Cross-site Scripting (XSS)
2018-08-0307:15:27
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
0.001 Low
EPSS
Percentile
23.7%
paypal/permissions-sdk-php is vulnerable to cross-site scripting (XSS) attacks. The library does not properly filter user input in the HTTP_REQUEST parameter in the GetAccessToken.php sample, allowing a malicious user to inject and execute arbitrary Javascript.
| CPE | Name | Operator | Version |
|---|---|---|---|
| paypal/permissions-sdk-php | le | 3.9.1 |
Related
cve
cve
CVE-2017-6215
2018-08-02 21:29:00
nvd
nvd
CVE-2017-6215
2018-08-02 21:29:00
osv
osv
paypal/permissions-sdk-php reflected Cross-site Scripting (XSS)
2022-05-14 02:58:18
CVE-2017-6215
2018-08-02 21:29:00
cvelist
cvelist
CVE-2017-6215
2018-08-02 21:00:00
prion
prion
Remote code execution
2018-08-02 21:29:00
github
github
paypal/permissions-sdk-php reflected Cross-site Scripting (XSS)
2022-05-14 02:58:18