Cross Site Scripting Vulnerability in PHP Scripts Mall Alibaba Clone Script
CVE-2018-6867
5.4MEDIUM
Key Information:
- Vendor
Alibaba Clone Script Project
- Status
- Vendor
- CVE Published:
- 23 February 2018
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2018-6867?
A Cross Site Scripting (XSS) vulnerability has been identified in PHP Scripts Mall's Alibaba Clone Script version 1.0.2. This vulnerability arises through inadequate validation of the profile parameter, which can allow attackers to inject malicious scripts into web pages viewed by other users. Exploiting this vulnerability may lead to unauthorized actions being performed within the context of the victim's session.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.