PHP Scripts Mall Website Seller Script 2.0.5 has XSS via a Profile field such as Company Address, a related issue to CVE-2018-15896.
References
Link | Resource |
---|---|
https://suku90.wordpress.com/2018/12/27/php-scripts-mall-website-seller-script-2-0-5-stored-and-reflected-xss/ | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Information
Published : 2018-12-28 08:29
Updated : 2019-01-03 11:07
NVD link : CVE-2018-20530
Mitre link : CVE-2018-20530
JSON object : View
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Products Affected
website_seller_script_project
- website_seller_script