Reflected XSS Vulnerability in iScripts eSwap by iScripts
CVE-2018-10135

6.1MEDIUM

Key Information:

Vendor

Iscripts

Status
Eswap
Vendor
CVE Published:
16 April 2018

What is CVE-2018-10135?

iScripts eSwap version 2.4 is vulnerable to reflected Cross-Site Scripting (XSS) attacks via the 'catwiseproducts.php' script. The vulnerability arises from improper validation of user-supplied input in the 'catid' parameter in the User Panel. An attacker could exploit this vulnerability to execute arbitrary JavaScript code in the context of the affected user's session, potentially leading to unauthorized access or exposing sensitive user data. It is important for users of this product to implement appropriate security measures.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://pastebin.com/vVN00qRh
x_refsource_MISC

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability Reserved

  • Vulnerability published

JSON
.