In short
- CVE-2018-6904 is a MEDIUM (CVSS 5.4) vulnerability affecting car rental script (car rental script project).
- Chance of exploitation in the next 30 days (EPSS): 0.51%, higher than 43.9% of all vulnerabilities.
- No patched version is listed yet: follow the vendor's advisory in References.
Description
PHP Scripts Mall Car Rental Script 2.0.8 has XSS via the User Name field in an Edit Profile action.
More vulnerabilities in car rental script
See all →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free