The PayPal Here mobile notify me online service web application suffered from multiple cross site scripting vulnerabilities.