Groupon Clone Script (Groupon Clone Script Project) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 4 known versions, newest CVE from 2018-02-23. Vendor: Groupon Clone Script Project.

CVEs of Groupon Clone Script

• CVE-2018-6868 - CVSS 5.4 (medium), 2018-02-23: Cross Site Scripting (XSS) exists in PHP Scripts Mall Slickdeals / DealNews / Groupon Clone Script 3.0.2 via a User Profile Field parameter.
• CVE-2017-17638 - CVSS 9.8 (critical), 2017-12-13: Groupon Clone Script 3.01 has SQL Injection via the city_ajax.php state_id parameter.