CVE-2018-20626

CVE-2018-20626 involves the PHP Scripts Mall Consumer Reviews Script 4.0.3. The connected records confirm a directory traversal vulnerability triggered by a direct request to an uploads directory (for example, wp-content/uploads/2018/12). The root cause is a traversal flaw that permits listing/po...

CVE-2018-20627

CVE-2018-20627 concerns PHP Scripts Mall Consumer Reviews Script 4.0.3, where an HTML injection vulnerability is reported via the search box. The available connected documents confirm the affected product and the attack surface but do not provide concrete details on exploit specifics, affected ve...