VendorsWebsite Seller Script Projectwebsite_seller_script2.0.3
Vulnerabilities

Website Seller Script Project Website Seller Script 2.0.3

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

3CVEs
CVE-2018-6879
PHP Scripts Mall Website Seller Script 2.0.3 uses the client side to enforce validation of an e-mail address, which allows remote attackers to modify a registered e-mail address by removing the validation code.
Published 2018-04-12 · Modified
8.8EPSS 0.010
CVE-2018-11501
PHP Scripts Mall Website Seller Script 2.0.3 has CSRF via user_submit.php?upd=2, with resultant XSS.
Published 2018-05-26 · Modified
8.8EPSS 0.006
CVE-2018-6870
Reflected XSS exists in PHP Scripts Mall Website Seller Script 2.0.3 via the Listings Search feature.
Published 2018-04-12 · Modified
6.1EPSS 0.007