Skip to content

CVE-2018-9857 PHP Scripts Mall Match Clone Script 1.0.4 has XSS via the search field to searchbyid.php (aka the "View Search By Id" screen).

MediumCVSS 6.1 EPSS 2.2% Public exploit
Published
Updated
Exploit status
Public exploit available

Description

PHP Scripts Mall Match Clone Script 1.0.4 has XSS via the search field to searchbyid.php (aka the "View Search By Id" screen).

Affected products

ProductAffected versionsFixed in
match clone script project match clone script = 1.0.4 No fix listed

References

  • pastebin.com exploit third-party-advisory
  • 44486 exploit third-party-advisory vdb-entry