CVE-2013-7202 - The WebHybridClient class in PayPal 5.3 and earlier for Android allows remote attackers to execute arbitrary JavaScript on the system

HIGH

The WebHybridClient class in PayPal 5.3 and earlier for Android allows remote attackers to execute arbitrary JavaScript on the system

Published Apr 27, 2018

8.1

HIGH

CVSS 3.0

EPSS 2.07%

The WebHybridClient class in PayPal 5.3 and earlier for Android allows remote attackers to execute arbitrary JavaScript on the system.

No remediation recorded yet.

Weaknesses (1)

CWE-264

Link	Providers	Tags
https://exchange.xforce.ibmcloud.com/vulnerabilities/92099		vdb-entryx_refsource_XFThird Party AdvisoryVDB Entry
https://labs.mwrinfosecurity.com/advisories/paypal-remote-code-execution/		x_refsource_MISCThird Party Advisory

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Apr 27, 2018

Updated Aug 6, 2024

Reserved Dec 23, 2013

Updated n/a

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a