← All advisories

Medium severity6.1NVD Advisory· Published Nov 14, 2018· Updated Jun 17, 2026

CVE-2018-19186

CVE-2018-19186

Description

The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via the route.php paymentMethod parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Payfort/Payfort PHP SDKinferred2 versions
<= 2018-04-26+ 1 more
- (no CPE)range: <= 2018-04-26
- (no CPE)range: <=2018-04-26
Amazon/Payfort PHP SDK
cpe:2.3:a:amazon:payfort-php-sdk:*:*:*:*:*:*:*:*
Range: <=2018-04-26

Patches

Vulnerability mechanics

References

1

www.seekurity.com/blog/general/payfort-multiple-security-issues-and-concerns-in-a-supposed-to-be-pci-dss-compliant-payment-processor-sdknvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.