Design/Logic Flaw

2019-02-2321:29:00

PRIOn knowledge base

www.prio-n.com

5.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.0%

PHP Scripts Mall PHP Appointment Booking Script 3.0.3 allows HTML injection in a user profile.

CPENameOperatorVersion
php_appointment_booking_scripteq3.0.3

CPE	Name	Operator	Version
	php_appointment_booking_script	eq	3.0.3

References

hackingvila.wordpress.com/2019/02/22/php-scripts-mall-php-appointment-booking-script-has-html-injection-via-an-edit-my-profile/