CVE-2018-16456

MEDIUM 6.1CVE-2018-16456 · Published 04/10/2018 · updated 17/06/2026

Package	Affected versions	Patched versions
website seller script phpscriptsmall	`= 2.0.5`	No fix yet

Description

PHP Scripts Mall Website Seller Script 2.0.5 has XSS via a keyword. NOTE: This may overlap with CVE-2018-6870 which has XSS via the Listings Search feature.

References

googlequeens.com/2018/09/04/cve-2018-16456-website-seller-scriptwebsite-seller-script-2-0-5-stored-xss-via-search-by-keyword · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free