CVE-2018-20138

Publication date

2018-12-13 18:00:00

Family

mitre

State

PUBLISHED

Description

PHP Scripts Mall Entrepreneur B2B Script 3.0.6 allows Stored XSS via Account Settings fields such as FirstName and LastName, a similar issue to CVE-2018-14541.