PT-2018-17750
CVE-2018-6796
·
تاريخ النشر
2018-02-07
·
تاريخ التحديث
2018-02-26
الوصف من
CVSS 3.1
5.4
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
PHP Scripts Mall Multilanguage Real Estate MLM Script version 3.0
Description
The issue is related to Stored XSS, which occurs via every profile input field. This means that an attacker can inject malicious code into the input fields of user profiles, potentially leading to the execution of unauthorized scripts.
Recommendations
For PHP Scripts Mall Multilanguage Real Estate MLM Script version 3.0, consider validating and sanitizing all user input to prevent malicious code injection as a temporary workaround until a patch is available. Restrict access to profile input fields to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾