PT-2018-13276
CVE-2018-15896
·
تاريخ النشر
2018-08-28
·
تاريخ التحديث
2018-10-31
الوصف من
CVSS 3.1
5.4
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
PHP Scripts Mall Website Seller Script version 2.0.5
Description
The issue is related to a problem where an attacker can execute a cross-site scripting (XSS) attack via the Personal Address or Company Name fields.
Recommendations
For version 2.0.5, update to a newer version that contains a fix for this issue, if available. As a temporary workaround, consider validating and sanitizing user input for the Personal Address and Company Name fields to prevent XSS attacks.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾