Unscored CVE-2017-7992 EUVD-2017-16962GHSA-7hvx-jg8h-g4xx

Heartland Payment Systems Payment Gateway PHP SDK hps/heartland-php v2.8.17 is vulnerable to a reflected XSS in examples/consumer-authentic…

Published Apr 21, 2017 · Updated Sep 16, 2024 · Assigned by mitre

Description

Heartland Payment Systems Payment Gateway PHP SDK hps/heartland-php v2.8.17 is vulnerable to a reflected XSS in examples/consumer-authentication/cruise.php via the URI, as demonstrated by the cavv parameter.

References

https://github.com/hps/heartland-php/issues/28