PT-2019-10128

CVE-2018-20632

·

Publicado

2019-03-20

·

Atualizado

2019-03-21

Descrição por

CVSS 3.1
5.4
Média
MétricasAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Advance B2B Script version 2.1.4
Description: The issue concerns stored Cross-Site Scripting (XSS) that can be triggered via the FIRST NAME or LAST NAME field.
Recommendations: For PHP Scripts Mall Advance B2B Script version 2.1.4, update the software to a version that fixes the stored XSS issue, ensuring proper input validation and sanitization for the FIRST NAME and LAST NAME fields to prevent malicious script execution.
Explorabilidade
Exploit
Correção
Impactos
Fornecedores
Produtos afetados
Enumeração de fraquezas
CWE-79: Improper Neutralization of Input During Web Page Generation (\'Cross-site Scripting\')
Identificadores relacionados
CVE-2018-20632
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com