CVE-2017-6217: PayPal Adaptive Payments SDK

Medium severity, CVSS 6.1. EPSS: 1.2% chance of exploitation in the next 30 days.

paypal/adaptivepayments-sdk-php v3.9.2 is vulnerable to a reflected XSS in the SetPaymentOptions.php resulting code execution

Affected products

• PayPal Adaptive Payments SDK: version 3.9.2 only

Published 2019-07-10. Last modified 2026-06-17.