Originally Posted by
frank_poulankh
If the stored card number were pulled into a hidden field on the payment form, prior to posting to the payment gateway, that script would grab it.
That would be a really poor way of handling stored card details but it is possible as
DYKWIA said a few posts up.