CVE-2017-6099 in PayPal PHP Merchant SDK
Summary
Cross-site scripting (XSS) vulnerability in GetAuthDetails.html.php in PayPal PHP Merchant SDK (aka merchant-sdk-php) 3.9.1 allows remote attackers to inject arbitrary web script or HTML via the token parameter.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Reservation
02/18/2017
Disclosure
02/23/2017
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 97233 | PayPal PHP Merchant SDK GetAuthDetails.html.php cross site scripting | 79 | Not defined | Not defined | CVE-2017-6099 |