Cross-Site Scripting Vulnerability in PHP Scripts Mall Facebook Clone Script
CVE-2018-6858

5.4MEDIUM

Key Information:

Vendor

Facebook Clone Script Project

Status
Facebook Clone Script
Vendor
CVE Published:
12 February 2018

What is CVE-2018-6858?

The PHP Scripts Mall Facebook Clone Script is susceptible to a Cross-Site Scripting (XSS) vulnerability. This security weakness allows attackers to inject malicious scripts into web pages viewed by other users. If exploited, it can lead to unauthorized data access, session hijacking, and defacement of the affected application. Developers and administrators should apply necessary security measures to mitigate the risk associated with this vulnerability.

References

https://www.exploit-db.com/exploits/44010
exploitx_refsource_EXPLOIT-DB

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.