PT-2026-30484 · Php Scripts Mall · Ask Expert Script

Mr Winst0N · Published 2026-04-05 · Updated 2026-04-05 · CVE-2019-25676

NVD

CVSS v3.1

8.2

High

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Ask Expert Script 3.0.5 contains cross-site scripting and SQL injection vulnerabilities that allow unauthenticated attackers to inject malicious code by manipulating URL parameters. Attackers can inject script tags through the cateid parameter in categorysearch.php or SQL code through the view parameter in list-details.php to execute arbitrary code or extract database information.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2019-25676

Affected Products

Ask Expert Script

References · 4

• 🔥 https://exploit-db.com/exploits/46426 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-25676 · Security Note
• http://phpscriptsmall.com · Note
• https://vulncheck.com/advisories/ask-expert-script-cross-site-scripting-sql-injection · Note