CVE-2017-6215

paypal/permissions-sdk-php is vulnerable to reflected XSS in the samples/GetAccessToken.php verification_code parameter, resulting in code execution.

Score

CVSS 3.0 5.4 Medium

Status

Modified - cve@mitre.org

Published

2018-08-02

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Php Permissions Sdk (Paypal)

References

• https://github.com/paypal/permissions-sdk-php/issues/19