PatchTheCVEwebsite seller script vulnerabilities and fixes
Recent CVEs affecting website seller script, with upgrade or downgrade steps. 8 tracked.
Also searched as: websitesellerscript.
website seller script has 8 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2019-03-21. Highest priority: CVE-2018-6879 (score 52/100).
- CVE-2018-6879 HIGH 8.8 DOWNGRADE PHP Scripts Mall Website Seller Script 2.0.3 uses the client side to enforce validation of an e-mail address,
- CVE-2018-6870 MEDIUM 6.1 DOWNGRADE Reflected XSS exists in PHP Scripts Mall Website Seller Script 2.0.3 via the Listings Search feature.
- CVE-2018-20631 MEDIUM 5.3 DOWNGRADE PHP Scripts Mall Website Seller Script 2.0.5 allows full Path Disclosure via a request for an arbitrary image
- CVE-2018-20530 MEDIUM 5.4 DOWNGRADE PHP Scripts Mall Website Seller Script 2.0.5 has XSS via a Profile field such as Company Address, a related is
- CVE-2018-16456 MEDIUM 6.1 DOWNGRADE PHP Scripts Mall Website Seller Script 2.0.5 has XSS via a keyword
- CVE-2018-15897 MEDIUM 6.5 DOWNGRADE PHP Scripts Mall Website Seller Script 2.0.5 allows remote attackers to cause a denial of service via crafted
- CVE-2018-15896 MEDIUM 5.4 DOWNGRADE PHP Scripts Mall Website Seller Script 2.0.5 has XSS via Personal Address or Company Name.
- CVE-2018-11501 HIGH 8.8 DOWNGRADE PHP Scripts Mall Website Seller Script 2.0.3 has CSRF via user_submit.php?upd=2, with resultant XSS.
FAQ
How do I fix website seller script vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is website seller script being exploited right now?
None of the tracked website seller script CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which website seller script CVE should I patch first?
CVE-2018-6879 currently ranks highest (52/100): PHP Scripts Mall Website Seller Script 2.0.3 uses the client side to enforce validation of an e-mail address, .