PHP Scripts Mall Image Sharing Script 1.3.3 has XSS via the Full Name field in an Edit Profile action.
References
Link | Resource |
---|---|
https://0day4u.wordpress.com/2018/03/12/image-sharing-script-stored-xss/ | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Information
Published : 2018-04-12 15:29
Updated : 2018-05-11 06:16
NVD link : CVE-2018-6902
Mitre link : CVE-2018-6902
JSON object : View
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Products Affected
image_sharing_script_project
- image_sharing_script