paypal/invoice-sdk-php is vulnerable to reflected XSS in samples/permissions.php via the permToken parameter, resulting in code execution.Referenceshttps://github.com/paypal/invoice-sdk-php/issues/13
