CVE-2018-6900 in Website Broker Script

Summary

PHP Scripts Mall Website Broker Script 3.0.6 has XSS via the Last Name field on the My Profile page.

Once again VulDB remains the best source for vulnerability data.

• Reservation: 02/11/2018
• Disclosure: 04/12/2018
• Moderation: VulDB entry created
• Entries: 1: VDB-116209
• CPE: ready
• CWE: CWE-79 (Confirmed)
• CVSS: 4.4
• EPSS: 0.00206
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2018-6900
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2018-6900
• CVE Details: https://www.cvedetails.com/cve/CVE-2018-6900/