XSS Vulnerability in PHP Scripts Mall Advanced Real Estate Script
CVE-2018-15189

5.4MEDIUM

Key Information:

Vendor: Advanced Real Estate Script Project
Status: Advanced Real Estate Script
Vendor: CVE Published:; 10 August 2018

🔔 Create Advanced Real Estate Script Project Vulnerability Alert

What is CVE-2018-15189?

The advanced-real-estate-script by PHP Scripts Mall is susceptible to a cross-site scripting (XSS) vulnerability. This flaw arises from improper handling of user input in the 'Name' field of user profiles, allowing attackers to inject malicious scripts. If successfully exploited, this could lead to unauthorized access to sensitive information or misuse of the affected application, highlighting the need for prompt remediation to protect users.

References

https://gkaim.com/cve-2018-15189-vikas-chaudhary/

x_refsource_MISC

CVSS V3.1

Score:

5.4

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

Required

Scope:

Changed

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Aug 10, 2018
Vulnerability Reserved
Aug 7, 2018

CVE-2018-15189 Data

JSON