CVE-2018-19924

An issue was discovered in Sales & Company Management System (SCMS) through 2018-06-06. An email address can be modified in between the request for a validation code and the entry of the validation code, leading to storage of an XSS payload contained in the modified address.

Score

CVSS 3.0 6.1 Medium

Status

Modified - cve@mitre.org

Published

2018-12-06

Last modified

2024-09-16

Weaknesses

CWE-79

Affected products

• Sales & Company Management System (Sales & Company Management System Project)

References

• https://github.com/Venan24/SCMS/issues/2