CVE-2018-7650

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Hot Scripts Clone:Script Classified Version 3.1

Description The application is vulnerable to stored XSS within the "Add New" function for a Management User. The issue arises because the application does not sanitize user-supplied input to the name parameter, allowing injected JavaScript code to be rendered to the user's browser.

Recommendations For PHP Scripts Mall Hot Scripts Clone:Script Classified Version 3.1, ensure proper sanitization of user input to the name parameter within the "Add New" function to prevent XSS attacks. As a temporary workaround, consider restricting access to the "Add New" function for Management Users until a proper fix is implemented.