CVEDB API

paypal/invoice-sdk-php is vulnerable to reflected XSS in samples/permissions.php via the permToken parameter, resulting in code execution.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 50.5%

CVSS Severity

CVSS v3 Score 5.4

CVSS v2 Score 3.5

References

Products affected by CVE-2017-6213

Paypal » Php Invoice Sdk » Version: 2.1.96

cpe:2.3:a:paypal:php_invoice_sdk:2.1.96
Paypal » Php Invoice Sdk » Version: 2.2.98

cpe:2.3:a:paypal:php_invoice_sdk:2.2.98
Paypal » Php Invoice Sdk » Version: 2.3.100

cpe:2.3:a:paypal:php_invoice_sdk:2.3.100
Paypal » Php Invoice Sdk » Version: 2.3.101

cpe:2.3:a:paypal:php_invoice_sdk:2.3.101
Paypal » Php Invoice Sdk » Version: 2.4.103

cpe:2.3:a:paypal:php_invoice_sdk:2.4.103
Paypal » Php Invoice Sdk » Version: 2.5.106

cpe:2.3:a:paypal:php_invoice_sdk:2.5.106
Paypal » Php Invoice Sdk » Version: 2.6.106

cpe:2.3:a:paypal:php_invoice_sdk:2.6.106
Paypal » Php Invoice Sdk » Version: 2.6.107

cpe:2.3:a:paypal:php_invoice_sdk:2.6.107
Paypal » Php Invoice Sdk » Version: 3.4.102

cpe:2.3:a:paypal:php_invoice_sdk:3.4.102
Paypal » Php Invoice Sdk » Version: 3.5.103

cpe:2.3:a:paypal:php_invoice_sdk:3.5.103
Paypal » Php Invoice Sdk » Version: 3.6.106

cpe:2.3:a:paypal:php_invoice_sdk:3.6.106
Paypal » Php Invoice Sdk » Version: 3.8.106

cpe:2.3:a:paypal:php_invoice_sdk:3.8.106
Paypal » Php Invoice Sdk » Version: 3.8.107

cpe:2.3:a:paypal:php_invoice_sdk:3.8.107
Paypal » Php Invoice Sdk » Version: 3.9.0

cpe:2.3:a:paypal:php_invoice_sdk:3.9.0