PHP Scripts Mall Advance B2B Script 2.1.4 has stored Cross-Site Scripting (XSS) via the FIRST NAME or LAST NAME field.
References
Link | Resource |
---|---|
https://gkaim.com/cve-2018-20632-vikas-chaudhary/ | Exploit Third Party Advisory |
Configurations
Information
Published : 2019-03-21 09:00
Updated : 2019-03-21 12:10
NVD link : CVE-2018-20632
Mitre link : CVE-2018-20632
JSON object : View
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Products Affected
advance_b2b_script_project
- advance_b2b_script