dsmall v20180320 allows XSS via the pdrsn parameter to public/index.php/home/predeposit/index.html...
6.1CVSS5.8AI score0.00707EPSS
SaveExploits1References1
OSV•added 2018/03/22 4:29 a.m.•7 views
CVE-2018-8906
dsmall v20180320 has XSS via a crafted street address to public/index.php/home/memberaddress/index.html, which is mishandled at public/index.php/home/memberaddress/edit/addressid/2.html...