CVE-2017-7992

Publication date

2017-04-21 14:00:00

Family

mitre

State

PUBLISHED

Description

Heartland Payment Systems Payment Gateway PHP SDK hps/heartland-php v2.8.17 is vulnerable to a reflected XSS in examples/consumer-authentication/cruise.php via the URI, as demonstrated by the cavv parameter.