← All advisories

High severity8.1NVD Advisory· Published Apr 27, 2018· Updated Jun 17, 2026

CVE-2013-7202

CVE-2013-7202

Description

The WebHybridClient class in PayPal 5.3 and earlier for Android allows remote attackers to execute arbitrary JavaScript on the system.

Affected products

3

Paypal/Paypal2 versions
cpe:2.3:a:paypal:paypal:*:*:*:*:*:android:*:*+ 1 more
- cpe:2.3:a:paypal:paypal:*:*:*:*:*:android:*:*range: <=5.3
- (no CPE)range: <=5.3
Paypal/WebHybridClientllm-create
Range: <=5.3

Patches

Vulnerability mechanics

References

2

exchange.xforce.ibmcloud.com/vulnerabilities/92099nvdThird Party AdvisoryVDB Entry
labs.mwrinfosecurity.com/advisories/paypal-remote-code-execution/nvdThird Party Advisory

News mentions

0

No linked articles in our index yet.