CVE-2018-14869 – PHP Template Store Script 3.0.6 - Cross-Site Scripting

https://notcve.org/view.php?id=CVE-2018-14869

03 Aug 2018 — PHP Template Store Script 3.0.6 allows XSS via the Address line 1, Address Line 2, Bank name, or A/C Holder name field in a profile. PHP Template Store Script 3.0.6 permite Cross-Site Scripting mediante los campos Address line 1, Address Line 2, Bank name o A/C Holder name en un perfil. PHP Template Store Script version 3.0.6 suffers from persistent cross site scripting vulnerabilities. • https://packetstorm.news/files/id/148808 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •