Website Broker Script Project » Website Broker Script : Security Vulnerabilities, CVEs,
PHP Scripts Mall Website Broker Script 3.0.6 has XSS via the Last Name field on the My Profile page.
Max CVSS
5.4
EPSS Score
0.06%
Published
2018-04-12
Updated
2018-05-11
Website Broker Script allows SQL Injection via the 'status_id' Parameter to status_list.php.
Max CVSS
9.8
EPSS Score
0.28%
Published
2017-10-31
Updated
2017-11-17
2 vulnerabilities found