Vulnerability Details CVE-2017-6215
paypal/permissions-sdk-php is vulnerable to reflected XSS in the samples/GetAccessToken.php verification_code parameter, resulting in code execution.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 50.6%
CVSS Severity
CVSS v3 Score 5.4
CVSS v2 Score 3.5
References
Products affected by CVE-2017-6215
-
cpe:2.3:a:paypal:php_permissions_sdk:2.1.96
-
cpe:2.3:a:paypal:php_permissions_sdk:2.2.98
-
cpe:2.3:a:paypal:php_permissions_sdk:2.3.100
-
cpe:2.3:a:paypal:php_permissions_sdk:2.3.101
-
cpe:2.3:a:paypal:php_permissions_sdk:2.4.103
-
cpe:2.3:a:paypal:php_permissions_sdk:2.5.106
-
cpe:2.3:a:paypal:php_permissions_sdk:2.6.106
-
cpe:2.3:a:paypal:php_permissions_sdk:2.6.107
-
cpe:2.3:a:paypal:php_permissions_sdk:3.4.102
-
cpe:2.3:a:paypal:php_permissions_sdk:3.5.103
-
cpe:2.3:a:paypal:php_permissions_sdk:3.6.106
-
cpe:2.3:a:paypal:php_permissions_sdk:3.7.106
-
cpe:2.3:a:paypal:php_permissions_sdk:3.8.106
-
cpe:2.3:a:paypal:php_permissions_sdk:3.8.107
-
cpe:2.3:a:paypal:php_permissions_sdk:3.9.0
-
cpe:2.3:a:paypal:php_permissions_sdk:3.9.1