CVE-2017-17953

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall PHP Multivendor Ecommerce (affected versions not specified)

Description The issue concerns a security problem where an attacker can execute malicious scripts. This is achieved through the category.php endpoint, specifically by manipulating the chid1 parameter.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.