Amazon Payfort-php-sdk — known CVE vulnerabilities

Every CVE whose affected-product data names Amazon Payfort-php-sdk, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2018-19186 — CVSS 6.1 (medium): The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via the route.php paymentMethod parameter.
• CVE-2018-19187 — CVSS 6.1 (medium): The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via an arbitrary parameter name or value that is…
• CVE-2018-19188 — CVSS 6.1 (medium): The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via the success.php fort_id parameter.
• CVE-2018-19189 — CVSS 6.1 (medium): The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via an arbitrary parameter name or value that is…
• CVE-2018-19190 — CVSS 6.1 (medium): The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via the error.php error_msg parameter.