PT-2019-18644 · Php Scripts Mall · Php Scripts Mall Chartered Accountant : Auditor Website

Published 2019-06-06 · Updated 2023-02-28 · CVE-2019-7553

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Chartered Accountant : Auditor Website version 2.0.1

Description The issue concerns a Stored XSS in the Profile Update page. Specifically, the My Name field is vulnerable, allowing for potential exploitation.

Recommendations For version 2.0.1, consider restricting input in the My Name field to minimize the risk of exploitation until a patch is available.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2019-7553

Affected Products

Php Scripts Mall Chartered Accountant : Auditor Website

References · 3

• 🔥 https://securityhitlist.blogspot.com/2019/02/cve-2019-7553-stores-xss-in-php-scripts.html · Exploit
• https://osv.dev/vulnerability/CVE-2019-7553 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-7553 · Security Note