Medium · 5.4 CVE-2017-6215 EUVD-2022-2035GHSA-2qfv-wwfx-fh34

paypal/permissions-sdk-php reflected Cross-site Scripting (XSS)

Published Aug 2, 2018 · Updated Aug 5, 2024 · Assigned by mitre

Description

paypal/permissions-sdk-php is vulnerable to reflected XSS in the samples/GetAccessToken.php verification_code parameter, resulting in code execution.

Ecosystem	Package	Affected	Fixed	Record
Packagist	paypal/permissions-sdk-php	<= 3.9.1	—	GHSA-2qfv-wwfx-fh34