CVE-2018-20138

CVE-2018-20138 corresponds to a Cross-Site Scripting vulnerability in PHP Scripts Mall’s Entrepreneur B2B Script 3.0.6. The issue arises from storing or reflecting unsanitized input in Account Settings (e.g., FirstName, LastName), enabling a attacker to inject web scripts. Public documentation (N...