CVE-2019-7552

EUVD-2019-17091
An issue was discovered in PHP Scripts Mall Investment MLM Software 2.0.2. Stored XSS was found in the the My Profile Section. This is due to lack of sanitization in the Edit Name section.
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.4 MEDIUM
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 42%
Affected Products (NVD)
VendorProductVersion
investment_mlm_software_projectinvestment_mlm_software
2.0.2
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://securityhitlist.blogspot.com/2019/02/cve-2019-7552-php-scripts-mall.html
https://www.phpscriptsmall.com/product/investment-mlm/
https://securityhitlist.blogspot.com/2019/02/cve-2019-7552-php-scripts-mall.html
https://www.phpscriptsmall.com/product/investment-mlm/