CVE-2017-6217 paypal/adaptivepayments-sdk-php vulnerable to a reflected XSS
MediumCVSS 6.1
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
paypal/adaptivepayments-sdk-php v3.9.2 is vulnerable to a reflected XSS in the SetPaymentOptions.php resulting code execution
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| paypal/adaptivepayments-sdk-php(Packagist) | <= 3.9.2 | No fix listed |
| paypal/adaptivepayments-sdk-php(Packagist) | = v2.2.98 | No fix listed |
| paypal/adaptivepayments-sdk-php(Packagist) | = v2.3.100 | No fix listed |
| paypal/adaptivepayments-sdk-php(Packagist) | = v2.3.101 | No fix listed |
| paypal/adaptivepayments-sdk-php(Packagist) | = v2.4.103 | No fix listed |
| paypal/adaptivepayments-sdk-php(Packagist) | = v2.5.106 | No fix listed |
| paypal/adaptivepayments-sdk-php(Packagist) | = v2.6.110 | No fix listed |
| paypal/adaptivepayments-sdk-php(Packagist) | = v2.7.117 | No fix listed |
| paypal/adaptivepayments-sdk-php(Packagist) | = v2.8.117 | No fix listed |
| paypal/adaptivepayments-sdk-php(Packagist) | = v2.8.118 | No fix listed |
| paypal/adaptivepayments-sdk-php(Packagist) | = v3.4.102 | No fix listed |
| paypal/adaptivepayments-sdk-php(Packagist) | = v3.5.103 | No fix listed |
| paypal/adaptivepayments-sdk-php(Packagist) | = v3.6.106 | No fix listed |
| paypal/adaptivepayments-sdk-php(Packagist) | = v3.7.106 | No fix listed |
| paypal/adaptivepayments-sdk-php(Packagist) | = v3.8.106 | No fix listed |
| paypal/adaptivepayments-sdk-php(Packagist) | = v3.8.107 | No fix listed |
| paypal/adaptivepayments-sdk-php(Packagist) | = v3.9.0 | No fix listed |
| paypal/adaptivepayments-sdk-php(Packagist) | = v3.9.1 | No fix listed |
| paypal/adaptivepayments-sdk-php(Packagist) | = v3.9.2 | No fix listed |
| paypal adaptive payments sdk | = 3.9.2 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com exploit third-party-advisory
- github.com product
- github.com