readymadeb2bscript vulnerabilities

Products

• basic b2b 1
• basic b2b script 1
• entrepreneur b2b script 1

Latest readymadeb2bscript CVEs

Newest publication first

1. CVE-2018-20138 PHP Scripts Mall Entrepreneur B2B Script 3.0.6 allows Stored XSS via Account Settings fields such as FirstName and LastName, a similar issue to CVE-2018-14541.

   Published 2018-12-13

   Medium·CVSS 5.4

   PHP Scripts Mall Entrepreneur B2B Script 3.0.6 allows Stored XSS via Account Settings fields such as FirstName and LastName, a similar issue to CVE-2018-14541.

2. CVE-2018-14541 PHP Scripts Mall Basic B2B Script 2.0.0 has Reflected and Stored XSS via the First name, Last name, Address 1, City, State, and Company name fields.

   Published 2018-08-03

   Medium·CVSS 5.4

   PHP Scripts Mall Basic B2B Script 2.0.0 has Reflected and Stored XSS via the First name, Last name, Address 1, City, State, and Company name fields.

3. CVE-2017-15985 Basic B2B Script allows SQL Injection via the product_view1.php pid or id parameter.

   Published 2017-10-31

   Critical·CVSS 9.8 EPSS 2.7%

   Basic B2B Script allows SQL Injection via the product_view1.php pid or id parameter.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.