A Cross-Site Scripting (XSS) vulnerability is found on PayPal a largest online payment and money transfer company website, by two Indian hackers named Vansh and Vaibhuv. XSS, in general is a vulnerability that allows hackers to inject client side script on webpages and can modify how a user sees the webpage. In case of Paypal it was a dangerous vulnerability where users engage on money transfer and other payments.