The PayPal Inc shipping application suffered form a cross site scripting vulnerability.