CVE-2018-6904

PHP Scripts Mall Car Rental Script 2.0.8 has XSS via the User Name field in an Edit Profile action.

Score

CVSS 3.0 5.4 Medium

Status

Modified - cve@mitre.org

Published

2018-04-12

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Car Rental Script (Car Rental Script Project)

References

• https://0day4u.wordpress.com/2018/03/12/car-rental-script-stored-xss/