Payfort-php-sdk (Amazon) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2018-11-14. Vendor: Amazon.

CVEs of Payfort-php-sdk

• CVE-2018-19188 - CVSS 6.1 (medium), 2018-11-14: The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via the success.php fort_id parameter.
• CVE-2018-19187 - CVSS 6.1 (medium), 2018-11-14: The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via an arbitrary parameter name or value that is mishandled in a success.php…
• CVE-2018-19190 - CVSS 6.1 (medium), 2018-11-14: The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via the error.php error_msg parameter.
• CVE-2018-19186 - CVSS 6.1 (medium), 2018-11-14: The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via the route.php paymentMethod parameter.
• CVE-2018-19189 - CVSS 6.1 (medium), 2018-11-14: The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via an arbitrary parameter name or value that is mishandled in an error.php…