paypal

Top products

The 15 most recently published vulnerabilities affecting paypal.

• CVE-2023-25026WordPress PayPal Brasil para WooCommerce plugin <= 1.4.2 - Broken Access Control vulnerability4.3Dec 9, 2024
• CVE-2022-48345sanitize-url (aka @braintree/sanitize-url) before 6.0.2 allows XSS via HTML entities.6.1Feb 24, 2023
• CVE-2022-21129Versions of the package nemo-appium before 0.0.9 are vulnerable to Command Injection due to improper input sanitization in the 'module.exports.setup' function. **Note:** In order to exploit this ...7.4Jan 31, 2023
• CVE-2021-23648Cross-site Scripting (XSS)5.4Mar 16, 2022
• CVE-2017-6217paypal/adaptivepayments-sdk-php v3.9.2 is vulnerable to a reflected XSS in the SetPaymentOptions.php resulting code execution6.1Jul 10, 2019
• CVE-2017-6215paypal/permissions-sdk-php is vulnerable to reflected XSS in the samples/GetAccessToken.php verification_code parameter, resulting in code execution.5.4Aug 2, 2018
• CVE-2017-6213paypal/invoice-sdk-php is vulnerable to reflected XSS in samples/permissions.php via the permToken parameter, resulting in code execution.5.4Aug 2, 2018
• CVE-2013-7202The WebHybridClient class in PayPal 5.3 and earlier for Android allows remote attackers to execute arbitrary JavaScript on the system.8.1Apr 27, 2018
• CVE-2013-7201WebHybridClient.java in PayPal 5.3 and earlier for Android ignores SSL errors, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information.7.4Apr 27, 2018
• CVE-2017-6099Cross-site scripting (XSS) vulnerability in GetAuthDetails.html.php in PayPal PHP Merchant SDK (aka merchant-sdk-php) 3.9.1 allows remote attackers to inject arbitrary web script or HTML via the to...6.1Feb 23, 2017
• CVE-2011-5237PayPal WPS ToolKit does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle ...5.8Nov 6, 2012
• CVE-2012-5806The PayPal Payments Pro module in Zen Cart does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which a...5.8Nov 4, 2012
• CVE-2012-5805The PayPal IPN functionality in Zen Cart does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which all...5.8Nov 4, 2012
• CVE-2012-5802The PayPal module in Ubercart does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-...5.8Nov 4, 2012
• CVE-2012-5798The PayPal Pro PayFlow EC module in osCommerce does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, whi...5.8Nov 4, 2012