medium6.1Public exploit code
CVE-2018-9857
PHP Scripts Mall Match Clone Script 1.0.4 has XSS via the search field to searchbyid.php (aka the "View Search By Id" screen).
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Match Clone Script 1.0.4 - Cross-Site Scripting2018-04-18 · webapps · php · Verified
Impact
PHP Scripts Mall Match Clone Script 1.0.4 has XSS via the search field to searchbyid.php (aka the "View Search By Id" screen).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Match Clone Script Project | Match Clone Script | Version 1.0.4 |