3 matches found
CVE-2018-20530
The CVE pertains to PHP Scripts Mall Website Seller Script 2.0.5, with an XSS vulnerability exposed via the Profile field (e.g., Company Address/Personal Address). The issue is associated with CVE-2018-20530 and related to CVE-2018-15896. According to the provided documents, the vulnerability ena...
CVE-2018-15896
The CVE-2018-15896 entry describes a Cross-Site Scripting (XSS) vulnerability in PHP Scripts Mall Website Seller Script 2.0.5. The issue is triggered via input fields Personal Address or Company Name, allowing injected scripts to be reflected. Exploitation details are not provided beyond the XSS ...
CVE-2018-20631
CVE-2018-20631 affects PHP Scripts Mall Website Seller Script 2.0.5. The vulnerability is a path disclosure issue in image URL handling (e.g., requesting arbitrary image files like .png) that may expose sensitive path information. Concrete impact details beyond information disclosure are not prov...