CVE-2018-6900: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Website Broker Script 3.0.6 has XSS via the Last Name field on the My Profile page...