2 matches found
CVE-2018-9016
dsmall v20180320 allows XSS via the main page search box at the public/index.php/home URI...
6.1AI score0.00696EPSS
SaveExploits1References1
CVE-2018-9016
The CVE-2018-9016 entry corresponds to a cross‑site scripting (XSS) vulnerability in dsmall v20180320, exploitable via the main page search box (public/index.php/home). The CNVD entry explicitly notes that a remote attacker can inject arbitrary HTML/JavaScript to obtain sensitive information. The...
6.1CVSS6AI score0.00696EPSS
SaveExploits1References1Affected Software1
20