CVE-2019-7552

An issue was discovered in PHP Scripts Mall Investment MLM Software 2.0.2. Stored XSS was found in the the My Profile Section. This is due to lack of sanitization in the Edit Name section.

CVSS v3.1

5.4 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

CVSS v2.0

3.5 LOWAV:N/AC:M/Au:S/C:N/I:P/A:N

EPSS

0.71% chance of exploitation in the next 30 days, 51th percentile

Published

2019-06-06

Updated

2024-08-04

Proof-of-concept exploits (1)

• https://securityhitlist.blogspot.com/2019/02/cve-2019-7552-php-scripts-mall.html

References

• CVE Record
• NVD entry

Related

• CVE-2019-7548
• CVE-2019-7553
• CVE-2019-7543
• CVE-2019-7554
• CVE-2019-7541
• CVE-2019-7564