PT-2018-18184
CVE-2018-7650
·
تاريخ النشر
2018-03-06
·
تاريخ التحديث
2018-03-27
الوصف من
CVSS 3.1
4.8
متوسطةالمقاييسAV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
PHP Scripts Mall Hot Scripts Clone:Script Classified Version 3.1
Description
The application is vulnerable to stored XSS within the "Add New" function for a Management User. The issue arises because the application does not sanitize user-supplied input to the
name parameter, allowing injected JavaScript code to be rendered to the user's browser.Recommendations
For PHP Scripts Mall Hot Scripts Clone:Script Classified Version 3.1, ensure proper sanitization of user input to the
name parameter within the "Add New" function to prevent XSS attacks. As a temporary workaround, consider restricting access to the "Add New" function for Management Users until a proper fix is implemented.قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾