Medium · 6.1 CVE-2017-6217 EUVD-2022-3439GHSA-9r4x-3534-w3f9

paypal/adaptivepayments-sdk-php vulnerable to a reflected XSS

Published Jul 10, 2019 · Updated Aug 5, 2024 · Assigned by mitre

Description

paypal/adaptivepayments-sdk-php v3.9.2 is vulnerable to a reflected XSS in the SetPaymentOptions.php resulting code execution

Ecosystem	Package	Affected	Fixed	Record
Packagist	paypal/adaptivepayments-sdk-php	<= 3.9.2	—	GHSA-9r4x-3534-w3f9