Posté par: igor51 le août 31, 2015, 10:00:17
An XSS hole could apparently have allowed a crook to pop up a realistic PayPal "pay page" and steal the victim's card data.
Paul Ducklin takes a look...
Source: PayPal patches potential payment-stealing vulnerability (http://feedproxy.google.com/~r/nakedsecurity/~3/0JUyNuK0HWc/)