Vulnerabilities > Paypal > PHP Invoice SDK > Low

DATE	CVE	VULNERABILITY TITLE	RISK
2018-08-02	CVE-2017-6213	Cross-site Scripting vulnerability in Paypal PHP Invoice SDK paypal/invoice-sdk-php is vulnerable to reflected XSS in samples/permissions.php via the permToken parameter, resulting in code execution. network paypal CWE-79	3.5

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.