TI-2017-05595 CVE-2017-7992 · GHSA-7hvx-jg8h-g4xxHeartland Payment Systems Payment Gateway PHP SDK hps/heartland-php v2.8.17 is vulnerable…Priority LOW 28Heartland Payment Systems Payment Gateway PHP SDK hps/heartland-php v2.8.17 is vulnerable to a reflected XSS in examples/consumer-authentication/cruise.php via the URI, as demonstrated by the cavv parameter.CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00693 · Published 2017-04-21 · No fix listed CWE-79