{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"3.9.1"}],"component":"paypal/permissions-sdk-php","cve_ids":["CVE-2017-6215"],"ecosystem":"Packagist","epss":0.00805,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-2qfv-wwfx-fh34","id":"tcs_01M5KES6CS5V6J0HR0CNV145G6","modified_at":"2024-04-25T21:57:35.129350Z","published_at":"2022-05-14T02:58:18Z","references":["https://osv.dev/vulnerability/GHSA-2qfv-wwfx-fh34","https://nvd.nist.gov/vuln/detail/CVE-2017-6215","https://github.com/paypal/permissions-sdk-php/issues/19","https://github.com/paypal/permissions-sdk-php/commit/a897893d467ca50b9b024b21bd8072ceb3bf2cf8","https://github.com/paypal/permissions-sdk-php"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-2qfv-wwfx-fh34","url":"https://osv.dev/vulnerability/GHSA-2qfv-wwfx-fh34"}],"summary":"paypal/permissions-sdk-php reflected Cross-site Scripting (XSS)"}