CVE-2013-7202

The WebHybridClient class in PayPal 5.3 and earlier for Android allows remote attackers to execute arbitrary JavaScript on the system.

Score

CVSS 3.0 8.1 High

Status

Modified - cve@mitre.org

Published

2018-04-27

Last modified

2024-08-06

Weaknesses

CWE-264

Affected products

• Paypal (Paypal)

References

• https://exchange.xforce.ibmcloud.com/vulnerabilities/92099
• https://labs.mwrinfosecurity.com/advisories/paypal-remote-code-execution/