CVE-2018-6862

CVE-2018-6862 is a cross-site scripting (XSS) vulnerability in PHP Scripts Mall Bitcoin MLM Software 1.0.2, exploitable via a profile field. Public records describe this as a stored XSS issue (PoC: injects script in profile edits, e.g., ), with multiple sources (CNVD, CVE lists, exploit databases...