2 matches found
Code injection
dsmall v20180320 has XSS via a crafted street address to public/index.php/home/memberaddress/index.html, which is mishandled at public/index.php/home/memberaddress/edit/addressid/2.html...
4.3CVSS5.8AI score0.00683EPSS
SaveExploits1References1Affected Software1
CVE-2018-8906: Improper Neutralization of Input During Web Page Generation
dsmall v20180320 has XSS via a crafted street address to public/index.php/home/memberaddress/index.html, which is mishandled at public/index.php/home/memberaddress/edit/addressid/2.html...
6.1CVSS6.3AI score0.00683EPSS
SaveExploits1References2
20