The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via the error.php error_msg parameter.
Search vulnerabilities
CVE-2018-19190
CVSS 3.0 · 6.1 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products
CVE-2018-19189
The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via an arbitrary parameter name or value that is mishandled in an error.php echo statement.
CVSS 3.0 · 6.1 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products
CVE-2018-19188
The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via the success.php fort_id parameter.
CVSS 3.0 · 6.1 Medium
EPSS 1.5%
KEV · Not listed
Vendors
Products
CVE-2018-19187
The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via an arbitrary parameter name or value that is mishandled in a success.php echo statement.
CVSS 3.0 · 6.1 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products
CVE-2018-19186
The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via the route.php paymentMethod parameter.
CVSS 3.0 · 6.1 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products
Page 1 of 1.