CVE-2018-6902 PHP Scripts Mall Image Sharing Script 1.3.3 has XSS via the Full Name field in an Edit Profile action.
MediumCVSS 5.4
EPSS 0.51%
- Published
- Updated
- Exploit status
- No public exploit known
Description
PHP Scripts Mall Image Sharing Script 1.3.3 has XSS via the Full Name field in an Edit Profile action.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| image sharing script project image sharing script | = 1.3.3 | No fix listed |
References
- 0day4u.wordpress.com exploit third-party-advisory