PayPal MultiOrder Shipping suffered from a persistent cross site scripting vulnerability.