VendorsWebsite Seller Script Projectwebsite_seller_script2.0.5
Vulnerabilities

Website Seller Script Project Website Seller Script 2.0.5

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

4CVEs
CVE-2018-15897
PHP Scripts Mall Website Seller Script 2.0.5 allows remote attackers to cause a denial of service via crafted JavaScript code in the First Name, Last Name, Company Name, or Fax field, as demonstrated by crossPwn.
Published 2018-08-28 · Modified
6.5EPSS 0.011
CVE-2018-15896
PHP Scripts Mall Website Seller Script 2.0.5 has XSS via Personal Address or Company Name.
Published 2018-08-28 · Modified
5.4EPSS 0.005
CVE-2018-20530
PHP Scripts Mall Website Seller Script 2.0.5 has XSS via a Profile field such as Company Address, a related issue to CVE-2018-15896.
Published 2018-12-27 · Modified
5.4EPSS 0.005
CVE-2018-20631
PHP Scripts Mall Website Seller Script 2.0.5 allows full Path Disclosure via a request for an arbitrary image URL such as a .png file.
Published 2019-03-20 · Modified
5.3EPSS 0.016