Description
paypal/invoice-sdk-php is vulnerable to reflected XSS in samples/permissions.php via the permToken parameter, resulting in code execution.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | paypal/invoice-sdk-php | <= 3.9.0 | — | GHSA-626w-hmpw-x74j |