Medium severity6.1NVD Advisory· Published Nov 14, 2018· Updated Jun 17, 2026
CVE-2018-19187
CVE-2018-19187
Description
The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via an arbitrary parameter name or value that is mishandled in a success.php echo statement.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3<= 2018-04-26+ 1 more
- (no CPE)range: <= 2018-04-26
- (no CPE)range: <=2018-04-26
Patches
Vulnerability mechanics
References
2- www.seekurity.com/blog/general/payfort-multiple-security-issues-and-concerns-in-a-supposed-to-be-pci-dss-compliant-payment-processor-sdknvdExploitThird Party Advisory
- www.securityfocus.com/bid/105930nvdThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.