CVE-2018-14869 – PHP Template Store Script 3.0.6 - Cross-Site Scripting

https://notcve.org/view.php?id=CVE-2018-14869

PHP Template Store Script 3.0.6 allows XSS via the Address line 1, Address Line 2, Bank name, or A/C Holder name field in a profile. PHP Template Store Script 3.0.6 permite Cross-Site Scripting mediante los campos Address line 1, Address Line 2, Bank name o A/C Holder name en un perfil. PHP Template Store Script version 3.0.6 suffers from persistent cross site scripting vulnerabilities. • https://www.exploit-db.com/exploits/45143 https://googlequeens.com/2018/08/03/cve-2018-14869-php-template-store-script-3-0-6-stored-xss-vulnerability • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •