CVE-2018-14541

PHP Scripts Mall Basic B2B Script 2.0.0 has Reflected and Stored XSS via the First name, Last name, Address 1, City, State, and Company name fields.

CVSS v3.0

5.4 MEDIUMCVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

CVSS v2.0

3.5 LOWAV:N/AC:M/Au:S/C:N/I:P/A:N

EPSS

0.66% chance of exploitation in the next 30 days, 49th percentile

Published

2018-08-03

Updated

2024-08-05

Proof-of-concept exploits (2)

• https://gkaim.com/cve-2018-14541-vikas-chaudhary/
• https://www.exploit-db.com/exploits/45140/

References

• CVE Record
• NVD entry

Related

• CVE-2018-14533
• CVE-2018-14551
• CVE-2018-14520
• CVE-2018-14557
• CVE-2018-14519
• CVE-2018-14558