PayPal

Records26All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

PayPal records in CISA KEV

No PayPal vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Braintree/sanitize-url · all components

TI-2021-06175 CVE-2021-23648 · GHSA-hqq7-2q2v-82xq

LOW 30

The package @braintree/sanitize-url before 6.0.0 are vulnerable to Cross-site Scripting (XSS) due to improper sanitization in sanitizeUrl function.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0143 Published 2022-03-16 Partial fix · 6.0.0 CWE-79

TI-2022-23959 CVE-2022-48345 · GHSA-q8gg-vj6m-hgmj

LOW 28

sanitize-url (aka @braintree/sanitize-url) before 6.0.2 allows XSS via HTML entities.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0056 Published 2023-02-24 Partial fix · 6.0.1 CWE-79