Vulnerabilities

TI-2018-04971 CVE-2018-6796 · GHSA-6mjp-wjh4-vh4h

PHP Scripts Mall Multilanguage Real Estate MLM Script 3.0 has Stored XSS via every profile input field.

LOW 25

PHP Scripts Mall Multilanguage Real Estate MLM Script 3.0 has Stored XSS via every profile input field.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00543 Published 2018-02-07 No fix listed CWE-79

TI-2018-04686 CVE-2018-6364 · GHSA-56f9-hr4g-65ff

MEDIUM 48

SQL Injection exists in Multilanguage Real Estate MLM Script through 3.0 via the /product-list.php srch parameter.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.0305 Published 2018-01-29 No fix listed CWE-89