CVE-2019-7552

Published: Jun 6, 2019Modified: Jun 17, 2026

5.4

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.3 / Impact: 2.7

Source: NVD

Description

An issue was discovered in PHP Scripts Mall Investment MLM Software 2.0.2. Stored XSS was found in the the My Profile Section. This is due to lack of sanitization in the Edit Name section.

Affected (1)

Products: Investment Mlm Software Project: Investment Mlm Software

Investment Mlm Software Project

1 product

Investment Mlm Software

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Investment Mlm Software Project Investment Mlm Software	Version 2.0.2

Related CWEs

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (4)

https://securityhitlist.blogspot.com/2019/02/cve-2019-7552-php-scripts-mall.html

Source: cve@mitre.org

ExploitThird Party Advisory

https://www.phpscriptsmall.com/product/investment-mlm/

Source: cve@mitre.org

Third Party Advisory

https://securityhitlist.blogspot.com/2019/02/cve-2019-7552-php-scripts-mall.html

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

https://www.phpscriptsmall.com/product/investment-mlm/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.