CVE-2018-8906 dsmall v20180320 has XSS via a crafted street address to public/index.php/home/memberaddress/index.html, which is mishandled at public/index.php/home/memberaddress/edit/address_id/2.html.
MediumCVSS 6.1
EPSS 0.68%
- Published
- Updated
- Exploit status
- No public exploit known
Description
dsmall v20180320 has XSS via a crafted street address to public/index.php/home/memberaddress/index.html, which is mishandled at public/index.php/home/memberaddress/edit/address_id/2.html.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dsmall project dsmall | = 20180320 | No fix listed |
References
- github.com exploit third-party-advisory