CVE-2018-14869 PHP Template Store Script 3.0.6 allows XSS via the Address line 1, Address Line 2, Bank name, or A/C Holder name field in a profile.
MediumCVSS 5.4
EPSS 1.6%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
PHP Template Store Script 3.0.6 allows XSS via the Address line 1, Address Line 2, Bank name, or A/C Holder name field in a profile.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| php template store script project php template store script | = 3.0.6 | No fix listed |
References
- googlequeens.com broken-link url-repurposed
- 45143 exploit third-party-advisory vdb-entry