medium5.4
CVE-2017-6215
paypal/permissions-sdk-php is vulnerable to reflected XSS in the samples/GetAccessToken.php verification_code parameter, resulting in code execution.
Impact
paypal/permissions-sdk-php is vulnerable to reflected XSS in the samples/GetAccessToken.php verification_code parameter, resulting in code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Paypal | Php Permissions Sdk | through 3.9.1 |