medium5.4Public exploit code
CVE-2018-9237
iScripts EasyCreate 3.2.1 has Stored Cross-Site Scripting in the "Site Description" field.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- iScripts Easycreate 3.2.1 - Stored Cross-Site Scripting2018-04-10 · webapps · php
Impact
iScripts EasyCreate 3.2.1 has Stored Cross-Site Scripting in the "Site Description" field.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Iscripts | Easycreate | Version 3.2.1 |